CVE-2026-74232

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 27, 2026
Source updated: Aug 27, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Zbtlink MQWrt yunmgrd Cloud C2 Implant

Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmware 3.0.0.4.380, APG721B firmware 19.0809, HK300 firmware 1.0.0.2.032, and MAP-N10 firmware 1.0.0.2.044 ship a backdoor command-and-control implant (yunmgrd) reachable over an unauthenticated cleartext UDP channel to a hardcoded C2 server. A remote unauthenticated attacker on the network path can hijack the channel and execute arbitrary commands as root. The attacker can also modify DNS entries, exfiltrate PPPoE credentials, and open reverse SSH tunnels.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

L3_V2_8

Vendor: Zbtlink
Product: L3_V2_8
Platforms: Unknown
Default status: unknown

L3_V2_8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.4.528	`affected`	custom	Unavailable	Unavailable	None listed

WE826-T2

Vendor: Zbtlink
Product: WE826-T2
Platforms: Unknown
Default status: unknown

WE826-T2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
19.1101	`affected`	custom	Unavailable	Unavailable	None listed

ZBT-7628

Vendor: Zbtlink
Product: ZBT-7628
Platforms: Unknown
Default status: unknown

ZBT-7628 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.007	`affected`	custom	Unavailable	Unavailable	None listed

ZBT-ZBT7621

Vendor: Zbtlink
Product: ZBT-ZBT7621
Platforms: Unknown
Default status: unknown

ZBT-ZBT7621 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.3.001	`affected`	custom	Unavailable	Unavailable	None listed

MQAC-7620

Vendor: MoreQuick
Product: MQAC-7620
Platforms: Unknown
Default status: unknown

MQAC-7620 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.000	`affected`	custom	Unavailable	Unavailable	None listed

MQAC-7620A

Vendor: MoreQuick
Product: MQAC-7620A
Platforms: Unknown
Default status: unknown

MQAC-7620A · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.000	`affected`	custom	Unavailable	Unavailable	None listed

MQAP-7620

Vendor: MoreQuick
Product: MQAP-7620
Platforms: Unknown
Default status: unknown

MQAP-7620 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.000	`affected`	custom	Unavailable	Unavailable	None listed

MQAP-7620A

Vendor: MoreQuick
Product: MQAP-7620A
Platforms: Unknown
Default status: unknown

MQAP-7620A · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.000	`affected`	custom	Unavailable	Unavailable	None listed

MQAP-7628

Vendor: MoreQuick
Product: MQAP-7628
Platforms: Unknown
Default status: unknown

MQAP-7628 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.000	`affected`	custom	Unavailable	Unavailable	None listed

AP522

Vendor: Unknown
Product: AP522
Platforms: Unknown
Default status: unknown

AP522 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.014	`affected`	custom	Unavailable	Unavailable	None listed

AP7628

Vendor: Unknown
Product: AP7628
Platforms: Unknown
Default status: unknown

AP7628 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.4.380	`affected`	custom	Unavailable	Unavailable	None listed

APG721B

Vendor: Unknown
Product: APG721B
Platforms: Unknown
Default status: unknown

APG721B · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
19.0809	`affected`	custom	Unavailable	Unavailable	None listed

HC5661A

Vendor: Unknown
Product: HC5661A
Platforms: Unknown
Default status: unknown

HC5661A · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0.4.380	`affected`	custom	Unavailable	Unavailable	None listed

HK300

Vendor: Unknown
Product: HK300
Platforms: Unknown
Default status: unknown

HK300 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.032	`affected`	custom	Unavailable	Unavailable	None listed

MAP-N10

Vendor: Unknown
Product: MAP-N10
Platforms: Unknown
Default status: unknown

MAP-N10 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.0.0.2.044	`affected`	custom	Unavailable	Unavailable	None listed