SecurityUnverified

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.

What happened

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.

Why it matters

The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.

Affected entities

View evidence

1 reports · 1 original report · 1 independent

  1. The Hacker NewsPrimary source · Supports · EN · 100%
    China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

Claims

  • China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

  1. First reported

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation

Confidence · formula confidence-2.1.0
Source trust80
Independent corroboration51
Primary evidence35
Claim consistency82
Extraction confidence82
Attribution quality90
Impact · formula impact-2.1.0
Event magnitude45
Market relevance74
Entity significance42
Market breadth45
Novelty68
Urgency55
Ranking · formula rank-1.0.0
Confidence factor0.8425
Freshness factor0.994
Breaking bonus0
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access | IntelCap