China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.

The implants, named SPEAKINGSTONE and DARKLANTERN by the company’s zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 06.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. Keine relevanten IPs erfasst (ruhig oder stark gefiltert). Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich

Read More

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 21.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 374 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.73.216.150 — 80 requests (recent

Read More