CVE record · CVE-2026-66747

ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant

CVSS 9.3 CriticalCriticalEPSS 0.0079 · 56th percentile

Critical, because:

CVSS score 9.3: 9.0 or more.

Published by the CVE Program (CNA: VulnCheck) at 5 Aug 2026, 10:50 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Zbtlink	CPE2801 Firmware	affected 22.10.09 custom Other versions: unaffected
Zbtlink	WE1026-5G-WD Firmware	affected 21.04.07 custom Other versions: unaffected
Zbtlink	WE1326 Firmware	affected 22.02.18_1 custom Other versions: unaffected
Zbtlink	WE2007 Firmware	affected 23.08.12 custom Other versions: unaffected
Zbtlink	WE2008-DSIM Firmware	affected 23.08.11 custom Other versions: unaffected
Zbtlink	WE2416 Firmware	affected 21.03.22_1 custom Other versions: unaffected
Zbtlink	WE3326 Firmware	affected 20.09.30 custom Other versions: unaffected
Zbtlink	WE5927 Firmware	affected 22.08.10 custom Other versions: unaffected
Zbtlink	WE5931 Firmware	affected 22.05.31 custom Other versions: unaffected
Zbtlink	WE5931AC Firmware	affected 22.05.31 custom Other versions: unaffected
Zbtlink	WE826-T3-DSIM Firmware	affected 21.12.21 custom Other versions: unaffected
Zbtlink	WG108 Firmware	affected 21.08.06_1 custom Other versions: unaffected
Zbtlink	WG209 Firmware	affected 21.07.28 custom Other versions: unaffected
Zbtlink	WG259 Firmware	affected 21.03.23 custom Other versions: unaffected
Zbtlink	WG1602 Firmware	affected 23.10.11 custom Other versions: unaffected
Zbtlink	WG1608-DSIM Firmware	affected 23.03.16 custom Other versions: unaffected
Zbtlink	WG2105 Firmware	affected 22.05.30 custom Other versions: unaffected
Zbtlink	WG2107 Firmware	affected 22.09.08 custom Other versions: unaffected
Zbtlink	WG3526 Firmware	affected 22.11.01 custom Other versions: unaffected
Zbtlink	ZBT-Z8102AX-2SIM Firmware	affected 7.6.7.2-25.0814_114432 custom Other versions: unaffected

Identifiers: CVE-2026-66747
CNA: VulnCheck
Weakness (CWE): CWE-506
Tags: Zbtlink CPE2801 Firmware
Zbtlink WE1026-5G-WD Firmware
Zbtlink WE1326 Firmware
Zbtlink WE2007 Firmware
Zbtlink WE2008-DSIM Firmware
Zbtlink WE2416 Firmware
Zbtlink WE3326 Firmware
Zbtlink WE5927 Firmware
CWE-506
Published: 5 Aug 2026
Updated: 5 Aug 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
9.3	Critical	4.0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CNA (VulnCheck)Used for this record
9.8	Critical	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CNA (VulnCheck)

CISA KEV Not listed.
EPSS 0.0079, the 56th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 5 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

www.zbtlink.com/pages/zbt-router-firmware-download product
github.com/ycsunjane/rctl
www.vulncheck.com/advisories/zbt-endlessdoors third-party-advisory
www.vulncheck.com/blog/zbt-endlessdoors technical-descriptionexploit

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.