https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 07:27:51 +0000 https://vulnerability.circl.lu/sighting/c0fa2276-5b10-4ae8-86d7-c0b018f77688/export {"uuid": "c0fa2276-5b10-4ae8-86d7-c0b018f77688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4patuxf525", "content": "CVE-2026-74233\nSeveral Zbtlink router models and some other devices run a background service that can be tricked by an unauthenticated network packet. An attacker who can reach the device on UDP port 9992 can cause it to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T06:10:04.355755Z"} {"uuid": "c0fa2276-5b10-4ae8-86d7-c0b018f77688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4patuxf525", "content": "CVE-2026-74233\nSeveral Zbtlink router models and some other devices run a background service that can be tricked by an unauthenticated network packet. An attacker who can reach the device on UDP port 9992 can cause it to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T06:10:04.355755Z"} https://vulnerability.circl.lu/sighting/c0fa2276-5b10-4ae8-86d7-c0b018f77688/export Fri, 28 Aug 2026 06:10:04 +0000 https://vulnerability.circl.lu/sighting/ab60f363-b439-4f88-915d-67c35c242b52/export {"uuid": "ab60f363-b439-4f88-915d-67c35c242b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4fn2tzft2b", "content": "VulnCheck found a ZBT router backdoor in firmware, tracked as CVE-2026-74232 and CVE-2026-74233, granting unauthenticated root over the internet.\n\n#ZBT #SupplyChain #Backdoor #RouterSecurity #VulnCheck", "creation_timestamp": "2026-08-28T03:18:01.991845Z"} {"uuid": "ab60f363-b439-4f88-915d-67c35c242b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4fn2tzft2b", "content": "VulnCheck found a ZBT router backdoor in firmware, tracked as CVE-2026-74232 and CVE-2026-74233, granting unauthenticated root over the internet.\n\n#ZBT #SupplyChain #Backdoor #RouterSecurity #VulnCheck", "creation_timestamp": "2026-08-28T03:18:01.991845Z"} https://vulnerability.circl.lu/sighting/ab60f363-b439-4f88-915d-67c35c242b52/export Fri, 28 Aug 2026 03:18:01 +0000 https://vulnerability.circl.lu/sighting/3e8ed108-c5c1-420e-aacd-e1886ccb8b46/export {"uuid": "3e8ed108-c5c1-420e-aacd-e1886ccb8b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3d5fypqv26", "content": "\ud83d\udd34 CVE-2026-74233 - Critical (9.8)\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74233/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T17:00:45.024893Z"} {"uuid": "3e8ed108-c5c1-420e-aacd-e1886ccb8b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3d5fypqv26", "content": "\ud83d\udd34 CVE-2026-74233 - Critical (9.8)\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74233/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T17:00:45.024893Z"} https://vulnerability.circl.lu/sighting/3e8ed108-c5c1-420e-aacd-e1886ccb8b46/export Thu, 27 Aug 2026 17:00:45 +0000 https://vulnerability.circl.lu/sighting/843e460b-2568-4dce-96b5-fbd179e993e4/export {"uuid": "843e460b-2568-4dce-96b5-fbd179e993e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168418324906939", "content": "Bugdoor too?\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74233\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.", "creation_timestamp": "2026-08-27T16:29:40.776815Z"} {"uuid": "843e460b-2568-4dce-96b5-fbd179e993e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168418324906939", "content": "Bugdoor too?\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74233\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.", "creation_timestamp": "2026-08-27T16:29:40.776815Z"} https://vulnerability.circl.lu/sighting/843e460b-2568-4dce-96b5-fbd179e993e4/export Thu, 27 Aug 2026 16:29:40 +0000 https://vulnerability.circl.lu/sighting/2c87fc54-92ee-4708-b977-43ee57cc0fef/export {"uuid": "2c87fc54-92ee-4708-b977-43ee57cc0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t", "content": "\ud83d\udea8 CVE-2026-74233 \u2014 CVSS 9.3 CRITICAL\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74233\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T14:07:52.288817Z"} {"uuid": "2c87fc54-92ee-4708-b977-43ee57cc0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t", "content": "\ud83d\udea8 CVE-2026-74233 \u2014 CVSS 9.3 CRITICAL\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74233\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T14:07:52.288817Z"} https://vulnerability.circl.lu/sighting/2c87fc54-92ee-4708-b977-43ee57cc0fef/export Thu, 27 Aug 2026 14:07:52 +0000