CVE-2026-66747 ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant

Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package librctl.so, started at boot and run as root under the process name kworker to blend in...

PT-2026-68096

Name of the Vulnerable Software and Affected Versions Zbtlink router firmware affected versions not specified Description Zbtlink router firmware contains an embedded remote-control implant known as ENDLESSDOORS, which is integrated as an OpenWrt package librctl.so. The implant runs as root under...