Chinese Zbtlink WiFi routers ship with ENDLESSDOORS malware

At least 20 Zbtlink router models contain a preinstalled remote-access implant that connects to external command-and-control servers and can execute arbitrary commands with root privileges. The issue, tracked as CVE-2026-66747, does not require attackers to compromise the router first, as the software is embedded in its firmware and starts automatically. VulnCheck researcher Jacob Baines discovered … The post Chinese Zbtlink WiFi routers ship with ENDLESSDOORS malware appeared first on CyberInsider.