Vulnerability in Zbtlink Cpe2801 Firmware
CVE-2026-66747
Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package (librctl.so), started at boo…
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Zbtlink Cpe2801 Firmware — versions 22.10.09
- Zbtlink We1026-5g-wd Firmware — versions 21.04.07
- Zbtlink We1326 Firmware — versions 22.02.18_1
- Zbtlink We2007 Firmware — versions 23.08.12
- Zbtlink We2008-dsim Firmware — versions 23.08.11
- Zbtlink We2416 Firmware — versions 21.03.22_1
- Zbtlink We3326 Firmware — versions 20.09.30
- Zbtlink We5927 Firmware — versions 22.08.10
- Zbtlink We5931ac Firmware — versions 22.05.31
- Zbtlink We5931 Firmware — versions 22.05.31
Weakness classification (CWE)
References
- disclosure@vulncheck.com
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (product)
Frequently asked questions
- What is CVE-2026-66747?
- CVE-2026-66747 is a critical-severity vulnerability in Zbtlink Cpe2801 Firmware, classified under CWE-506. CVSS score: 9.8/10. Published 2026-08-05.
- How severe is CVE-2026-66747?
- Critical severity. CVSS v3 base score is 9.8 out of 10.