SecurityThe Hacker Newsabout 2 hours ago
ZBT Routers Ship With Two Root Access Implants
1 min read
VulnCheck disclosed two factory implants, SPEAKINGSTONE and DARKLANTERN, in Shenzhen Zhibotong Electronics (ZBT) router firmware, each granting unauthenticated remote root access. Tracked as CVE-2026-74232 and CVE-2026-74233, both scored 9.8 on CVSS 3.1. SPEAKINGSTONE beacons to a hardcoded C2 server; DARKLANTERN opens UDP port 9992 to the internet.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
