CVE-2026-74232

Name of the Vulnerable Software and Affected Versions Zbtlink L3 V2 8 version 3.0.0.4.528 Zbtlink WE826-T2 version 19.1101 Zbtlink ZBT-7628 version 1.0.0.2.007 Zbtlink ZBT-ZBT7621 version 1.0.0.3.001 MoreQuick MQAC-7620 version 1.0.0.2.000 MoreQuick MQAC-7620A version 1.0.0.2.000 MoreQuick MQAP-7620 version 1.0.0.2.000 MoreQuick MQAP-7620A version 1.0.0.2.000 MoreQuick MQAP-7628 version 1.0.0.2.000 AP522 version 1.0.0.2.014 AP7628 version 3.0.0.4.380 HC5661A version 3.0.0.4.380 APG721B version 19.0809 HK300 version 1.0.0.2.032 MAP-N10 version 1.0.0.2.044

Description These devices ship with a backdoor command-and-control implant called yunmgrd. This implant communicates via an unauthenticated cleartext UDP channel to a hardcoded C2 server. A remote unauthenticated attacker positioned on the network path can hijack this channel to execute arbitrary commands with root privileges. Additionally, the attacker can modify DNS entries, exfiltrate PPPoE credentials, and establish reverse SSH tunnels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.