https://vulnerability.circl.lu/sightings/feed 2026-08-28T07:27:47.190107+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c0fa2276-5b10-4ae8-86d7-c0b018f77688/export 2026-08-28T07:27:47.213931+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c0fa2276-5b10-4ae8-86d7-c0b018f77688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4patuxf525", "content": "CVE-2026-74233\nSeveral Zbtlink router models and some other devices run a background service that can be tricked by an unauthenticated network packet. An attacker who can reach the device on UDP port 9992 can cause it to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T06:10:04.355755Z"} 2026-08-28T06:10:04.355755+00:00 https://vulnerability.circl.lu/sighting/ab60f363-b439-4f88-915d-67c35c242b52/export 2026-08-28T07:27:47.215680+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ab60f363-b439-4f88-915d-67c35c242b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4fn2tzft2b", "content": "VulnCheck found a ZBT router backdoor in firmware, tracked as CVE-2026-74232 and CVE-2026-74233, granting unauthenticated root over the internet.\n\n#ZBT #SupplyChain #Backdoor #RouterSecurity #VulnCheck", "creation_timestamp": "2026-08-28T03:18:01.991845Z"} 2026-08-28T03:18:01.991845+00:00 https://vulnerability.circl.lu/sighting/3e8ed108-c5c1-420e-aacd-e1886ccb8b46/export 2026-08-28T07:27:47.215814+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3e8ed108-c5c1-420e-aacd-e1886ccb8b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3d5fypqv26", "content": "\ud83d\udd34 CVE-2026-74233 - Critical (9.8)\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74233/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T17:00:45.024893Z"} 2026-08-27T17:00:45.024893+00:00 https://vulnerability.circl.lu/sighting/843e460b-2568-4dce-96b5-fbd179e993e4/export 2026-08-28T07:27:47.215927+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "843e460b-2568-4dce-96b5-fbd179e993e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168418324906939", "content": "Bugdoor too?\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74233\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.", "creation_timestamp": "2026-08-27T16:29:40.776815Z"} 2026-08-27T16:29:40.776815+00:00 https://vulnerability.circl.lu/sighting/2c87fc54-92ee-4708-b977-43ee57cc0fef/export 2026-08-28T07:27:47.216035+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2c87fc54-92ee-4708-b977-43ee57cc0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t", "content": "\ud83d\udea8 CVE-2026-74233 \u2014 CVSS 9.3 CRITICAL\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74233\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T14:07:52.288817Z"} 2026-08-27T14:07:52.288817+00:00