CVE-2026-74233 Zbtlink MQWrt infosrvd Command Injection

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

CVE-2026-74233

CVE-2026-74233 affects multiple Zbtlink wireless devices running MQWrt firmware (e.g., WE1326, WE357, WE5926, WG108, and others) due to an unauthenticated command injection in the infosrvd service on UDP/9992 . The service's authentication is rendered ineffective by a hardcoded salt and an all-ze...