https://vulnerability.circl.lu/sightings/feed 2026-08-29T16:52:00.323115+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2ff58bd1-b52d-464e-98e6-0aab29a6572b/export 2026-08-29T16:52:00.351545+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2ff58bd1-b52d-464e-98e6-0aab29a6572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu7rm3filz22", "content": "\ud83d\udce2 Ces routeurs chinois peuvent \u00eatre contr\u00f4l\u00e9s \u00e0 distance sans authentification - CVE-2026-74233 CVE-2026-74232\n\nDeux nouveaux implants ont \u00e9t\u00e9 d\u00e9tect\u00e9s dans des routeurs du fabricant chinois Zbtlink, \u00e0 l\u2019origine d\u2019une porte d\u00e9rob\u00e9e d\u00e9couverte d\u00e9but ao\u00fbt sur une vingtaine de mod\u00e8l\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-29T11:30:07.911695Z"} 2026-08-29T11:30:07.911695+00:00 https://vulnerability.circl.lu/sighting/265aa952-6747-4269-97ee-21fa837acd7d/export 2026-08-29T16:52:00.352940+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "265aa952-6747-4269-97ee-21fa837acd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "Telegram/q4w7ZKZ0cDl8jF65XtpHWB3xtg4Yw9cQXGu86S8yQmpVqQ", "content": "", "creation_timestamp": "2026-08-29T03:00:04.469196Z"} 2026-08-29T03:00:04.469196+00:00 https://vulnerability.circl.lu/sighting/96af095e-b4b5-4bd0-9a44-730c231acb9c/export 2026-08-29T16:52:00.353030+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "96af095e-b4b5-4bd0-9a44-730c231acb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html", "content": "VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.\n\nThe implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.", "creation_timestamp": "2026-08-29T01:00:35.583766Z"} 2026-08-29T01:00:35.583766+00:00 https://vulnerability.circl.lu/sighting/23e7c2b4-cb6a-4890-ba97-fe6de4728740/export 2026-08-29T16:52:00.353098+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "23e7c2b4-cb6a-4890-ba97-fe6de4728740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://t.me/pphm_HackerNews/2920", "content": "\ud83d\udd34 China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access\n\nVulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.\n\nThe implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.\n\nVulnCheck, which assigned both identifiers as a CVE Numbering Authority (CNA), rated each 9.3 on the CVSS 4.0 scoring system and 9.8 on CVSS 3.1. Both vectors record a network attack requiring no privileges and no user interaction.", "creation_timestamp": "2026-08-29T00:00:07.896116Z"} 2026-08-29T00:00:07.896116+00:00 https://vulnerability.circl.lu/sighting/42e151c7-cd9c-4b1a-8391-077614f0a19a/export 2026-08-29T16:52:00.353162+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "42e151c7-cd9c-4b1a-8391-077614f0a19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://bsky.app/profile/unrayocruel.bsky.social/post/3mu6deahyus25", "content": "Los routers ZBT fabricados en China se env\u00edan con dos implantes que otorgan acceso de administrador a atacantes no autenticados.\n SPEAKINGSTONE (CVE-2026-74232) y DARKLANTERN (CVE-2026-74233), capaces de permitir a atacantes remotos no autenticados ejecutar comandos con privilegios de root.", "creation_timestamp": "2026-08-28T21:42:36.011597Z"} 2026-08-28T21:42:36.011597+00:00 https://vulnerability.circl.lu/sighting/a00d49d7-65ac-4576-9c22-9a866efcf262/export 2026-08-29T16:52:00.353229+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a00d49d7-65ac-4576-9c22-9a866efcf262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://t.me/pphm_HackerNews/2920", "content": "\ud83d\udd34 China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access\n\nVulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.\n\nThe implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.\n\nVulnCheck, which assigned both identifiers as a CVE Numbering Authority (CNA), rated each 9.3 on the CVSS 4.0 scoring system and 9.8 on CVSS 3.1. Both vectors record a network attack requiring no privileges and no user interaction.", "creation_timestamp": "2026-08-28T18:00:05.107011Z"} 2026-08-28T18:00:05.107011+00:00 https://vulnerability.circl.lu/sighting/aafa7e96-1367-4d49-a3e1-e47e2b33e5c4/export 2026-08-29T16:52:00.353291+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aafa7e96-1367-4d49-a3e1-e47e2b33e5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html", "content": "VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.\n\nThe implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.", "creation_timestamp": "2026-08-28T16:00:54.308527Z"} 2026-08-28T16:00:54.308527+00:00 https://vulnerability.circl.lu/sighting/881dfc73-ac0c-4618-8f8a-422782b92579/export 2026-08-29T16:52:00.353355+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "881dfc73-ac0c-4618-8f8a-422782b92579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4qwiymq42y", "content": "CVE-2026-74232\nSeveral firmware versions for Zbtlink, MoreQuick, AP, HK and MAP devices contain code that opens an unauthenticated UDP channel to a fixed server. Anyone on the same network can take control, run commands as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T06:40:04.666015Z"} 2026-08-28T06:40:04.666015+00:00 https://vulnerability.circl.lu/sighting/db7b298f-d95f-4f7c-bb22-c218b0627fc6/export 2026-08-29T16:52:00.353423+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "db7b298f-d95f-4f7c-bb22-c218b0627fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4fn2tzft2b", "content": "VulnCheck found a ZBT router backdoor in firmware, tracked as CVE-2026-74232 and CVE-2026-74233, granting unauthenticated root over the internet.\n\n#ZBT #SupplyChain #Backdoor #RouterSecurity #VulnCheck", "creation_timestamp": "2026-08-28T03:18:01.926874Z"} 2026-08-28T03:18:01.926874+00:00 https://vulnerability.circl.lu/sighting/b44499a0-adf0-4dd5-9d11-bcb10e1f3f05/export 2026-08-29T16:52:00.353488+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b44499a0-adf0-4dd5-9d11-bcb10e1f3f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74232", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3d5nbb3o2r", "content": "\ud83d\udd34 CVE-2026-74232 - Critical (9.8)\n\nZbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmwar...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74232/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T17:00:52.619066Z"} 2026-08-27T17:00:52.619066+00:00