CVE-2026-74233— Zbtlink MQWrt infosrvd Command Injection
Quick assessment
Affected
Zbtlink WE1326
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Zbtlink WE1326、WE357、WE5926、WE5926-WD、WE826-Q、WE826-T2、WE826-WD、WG108 和 WG3526（固件 19.1101）、Zbtlink WE2426-C（固件 19.1112）、Zbtlink WE5926-EC_QP（固件 20.0516）、Zbtlink WF3526-P（固件 19.051）、CTN720-W1、LF-1541 和 MT7620N（固件 19.1101），以及 WRC1（固件 20.0622）在 infosrvd 服务（UDP/99
Possible ATT&CK Techniques 3 AI
T1196 T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-74233
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zbtlink MQWrt infosrvd Command Injection
Source: CVE Program / CVE List V5
Vulnerability Description
Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的密码学密钥
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Zbtlink | WE1326 | 19.1101 | - |
|
| Zbtlink | WE2426-C | 19.1112 | - |
|
| Zbtlink | WE357 | 19.1101 | - |
|
| Zbtlink | WE5926 | 19.1101 | - |
|
| Zbtlink | WE5926-EC_QP | 20.0516 | - |
|
| Zbtlink | WE5926-WD | 19.1101 | - |
|
| Zbtlink | WE826-Q | 19.1101 | - |
|
| Zbtlink | WE826-T2 | 19.1101 | - |
|
| Zbtlink | WE826-WD | 19.1101 | - |
|
| Zbtlink | WF3526-P | 19.051 | - |
|
| Zbtlink | WG108 | 19.1101 | - |
|
| Zbtlink | WG3526 | 19.1101 | - |
|
| Unknown | CTN720-W1 | 19.1101 | - |
|
| Unknown | LF-1541 | 19.1101 | - |
|
| Unknown | MT7620N | 19.1101 | - |
|
| Unknown | WRC1 | 20.0622 | - |
|
II. Public POCs for CVE-2026-74233
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-74233
请登录查看更多情报信息。
Other References for CVE-2026-74233 (1)
-
🔗 Zbtlink MQWrt infosrvd Command Injection | Advisories | VulnCheck Read full article third-party-advisory
IV. Related Vulnerabilities
Same weakness: CWE-321
-
CVE-2026-24166
NVIDIA UFM Enterprise会话管理硬编码密钥致信息泄露 -
CVE-2026-15469
Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE53 -
CVE-2026-76258
Use of Hard-coded Cryptographic Key through Companion App Re -
CVE-2026-64887
Airwall - Hardcoded Secrets -
CVE-2026-17468
IBM Documentation Offline is vulnerable to information discl
V. Comments for CVE-2026-74233
No comments yet