CVE-2026-74233

Name of the Vulnerable Software and Affected Versions Zbtlink WE1326 firmware 19.1101 Zbtlink WE357 firmware 19.1101 Zbtlink WE5926 firmware 19.1101 Zbtlink WE5926-WD firmware 19.1101 Zbtlink WE826-Q firmware 19.1101 Zbtlink WE826-T2 firmware 19.1101 Zbtlink WE826-WD firmware 19.1101 Zbtlink WG108 firmware 19.1101 Zbtlink WG3526 firmware 19.1101 Zbtlink WE2426-C firmware 19.1112 Zbtlink WE5926-EC QP firmware 20.0516 Zbtlink WF3526-P firmware 19.051 CTN720-W1 firmware 19.1101 LF-1541 firmware 19.1101 MT7620N firmware 19.1101 WRC1 firmware 20.0622

Description The infosrvd service, which listens on the UDP/9992 endpoint, contains an unauthenticated command injection. A remote attacker can send a specially crafted UDP packet to execute arbitrary commands with root privileges. The authentication mechanism is ineffective because it relies on a hardcoded salt and an all-zero wildcard MAC bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the infosrvd service on UDP/9992 to minimize the risk of exploitation.