Backdoor Vulnerability in Zbtlink Products Exposing Users to Attack

CVE-2026-74232

What is CVE-2026-74232?

The identified vulnerability in Zbtlink products allows for the presence of a backdoor command-and-control implant, named 'yunmgrd', that can be accessed over an unsecured UDP channel. This backdoor can be exploited by remote attackers who can hijack the communication channel without authentication. Once compromised, attackers can execute arbitrary commands with root privileges, alter DNS settings, extract sensitive PPPoE credentials, and establish reverse SSH tunnels, thereby compromising the integrity and confidentiality of the affected devices and users.

References