{"vulnerability": "CVE-2026-74233", "sightings": [{"uuid": "2c87fc54-92ee-4708-b977-43ee57cc0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2ziceyq22t", "content": "\ud83d\udea8 CVE-2026-74233 \u2014 CVSS 9.3 CRITICAL\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74233\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T14:07:52.288817Z"}, {"uuid": "843e460b-2568-4dce-96b5-fbd179e993e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168418324906939", "content": "Bugdoor too?\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74233\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.", "creation_timestamp": "2026-08-27T16:29:40.776815Z"}, {"uuid": "3e8ed108-c5c1-420e-aacd-e1886ccb8b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74233", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3d5fypqv26", "content": "\ud83d\udd34 CVE-2026-74233 - Critical (9.8)\n\nZbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74233/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T17:00:45.024893Z"}]}