Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2026-66747

🗓️ 05 Aug 2026 10:50:45Reported by VulnCheckType 
cve
 cve🔗 web.nvd.nist.gov👁 16 Views

ENDLESSDOORS embeds a root implant in Zbtlink routers, started at boot, phones unencrypted to a C2 server.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2026-66747
5 Aug 202610:50
–attackerkb
circl
Circl		CVE-2026-66747
5 Aug 202610:34
–circl
cvelist
Cvelist		CVE-2026-66747 ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant
5 Aug 202610:50
–cvelist
euvd
EUVD		EUVD-2026-53301
5 Aug 202610:50
–euvd
nvd
NVD		CVE-2026-66747
5 Aug 202611:16
–nvd
vulnrichment
Vulnrichment		CVE-2026-66747 ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant
5 Aug 202610:50
–vulnrichment
Vulners
Node
OR
OR
zbtlinkcpe2801_firmwareMatch22.10.09mips
zbtlinkcpe2801_firmwareMatch22.10.09arm
OR
zbtlinkwe1026-5g-wd_firmwareMatch21.04.07mips
zbtlinkwe1026-5g-wd_firmwareMatch21.04.07arm
OR
zbtlinkwe1326_firmwareMatch22.02.18_1mips
zbtlinkwe1326_firmwareMatch22.02.18_1arm
OR
zbtlinkwe2007_firmwareMatch23.08.12mips
zbtlinkwe2007_firmwareMatch23.08.12arm
OR
zbtlinkwe2008-dsim_firmwareMatch23.08.11mips
zbtlinkwe2008-dsim_firmwareMatch23.08.11arm
OR
zbtlinkwe2416_firmwareMatch21.03.22_1mips
zbtlinkwe2416_firmwareMatch21.03.22_1arm
OR
zbtlinkwe3326_firmwareMatch20.09.30mips
zbtlinkwe3326_firmwareMatch20.09.30arm
OR
zbtlinkwe5927_firmwareMatch22.08.10mips
zbtlinkwe5927_firmwareMatch22.08.10arm
OR
zbtlinkwe5931_firmwareMatch22.05.31mips
zbtlinkwe5931_firmwareMatch22.05.31arm
OR
zbtlinkwe5931ac_firmwareMatch22.05.31mips
zbtlinkwe5931ac_firmwareMatch22.05.31arm
OR
zbtlinkwe826-t3-dsim_firmwareMatch21.12.21mips
zbtlinkwe826-t3-dsim_firmwareMatch21.12.21arm
OR
zbtlinkwg108_firmwareMatch21.08.06_1mips
zbtlinkwg108_firmwareMatch21.08.06_1arm
OR
zbtlinkwg209_firmwareMatch21.07.28mips
zbtlinkwg209_firmwareMatch21.07.28arm
OR
zbtlinkwg259_firmwareMatch21.03.23mips
zbtlinkwg259_firmwareMatch21.03.23arm
OR
zbtlinkwg1602_firmwareMatch23.10.11mips
zbtlinkwg1602_firmwareMatch23.10.11arm
OR
zbtlinkwg1608-dsim_firmwareMatch23.03.16mips
zbtlinkwg1608-dsim_firmwareMatch23.03.16arm
OR
zbtlinkwg2105_firmwareMatch22.05.30mips
zbtlinkwg2105_firmwareMatch22.05.30arm
OR
zbtlinkwg2107_firmwareMatch22.09.08mips
zbtlinkwg2107_firmwareMatch22.09.08arm
OR
zbtlinkwg3526_firmwareMatch22.11.01mips
zbtlinkwg3526_firmwareMatch22.11.01arm
zbtlinkzbt-z8102ax-2sim_firmwareMatch7.6.7.2-25.0814_114432arm
[
  {
    "vendor": "Zbtlink",
    "product": "CPE2801 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.10.09",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:cpe2801_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE1026-5G-WD Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.04.07",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we1026-5g-wd_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE1326 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.02.18_1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we1326_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE2007 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "23.08.12",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we2007_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE2008-DSIM Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "23.08.11",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we2008-dsim_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE2416 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.03.22_1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we2416_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE3326 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "20.09.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we3326_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE5927 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.08.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we5927_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE5931 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.05.31",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we5931_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE5931AC Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.05.31",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we5931ac_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WE826-T3-DSIM Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.12.21",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:we826-t3-dsim_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG108 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.08.06_1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg108_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG209 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.07.28",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg209_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG259 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "21.03.23",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg259_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG1602 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "23.10.11",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg1602_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG1608-DSIM Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "23.03.16",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg1608-dsim_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG2105 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.05.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg2105_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG2107 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.09.08",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg2107_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "WG3526 Firmware",
    "platforms": [
      "MIPS",
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "22.11.01",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:wg3526_firmware:*:*:*:*:*:*:*:*"
    ]
  },
  {
    "vendor": "Zbtlink",
    "product": "ZBT-Z8102AX-2SIM Firmware",
    "platforms": [
      "ARM"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "7.6.7.2-25.0814_114432",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:2.3:o:zbtlink:z8102ax_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Aug 2026 15:17Current
6.4Medium risk
Vulners AI Score6.4
CVSS 49.3
CVSS 3.19.8
SSVC
CWE-506
ENDLESSDOORSZbtlink routersroot implantboot persistencecommand and controlunencrypted channelremote code executionkworker
16