Critical 9.8
CVE-2026-66747
Backdoor found in Zbtlink routers, tracked as ENDLESSDOORS
Vendor / product: Zbtlink, Wiflyer
Event date: 2026-08-05
Victim organization: not stated
Public PoC: Yes
First tracked by RiskWire: 2026-07-28
Sources & citations (19)
- Researcher Finds Backdoor in Chinese-Made Routers Sold Worldwide theepochtimes.com · 2026-08-05
- China's Zbtlink suspends sales of routers found to contain backdoor tech.yahoo.com · 2026-08-06
- Zbtlink Ships ENDLESSDOORS: 21 Firmware Images, One Unauthenticated Root Shell dev.to · 2026-08-06
- Chinese Router Maker Halts Firmware Downloads Amid Backdoor Allegations th.headtopics.com · 2026-08-06
- ENDLESSDOORS Zbtlink Router Backdoor: 20 Models blog.gridinsoft.com · 2026-08-05
- VulnCheck Warns That Chinese Zbtlink Routers Include a Backdoor securityboulevard.com · 2026-08-05
- Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway theregister.com · 2026-08-06
- Backdoor Found in 100,000 Chinese Routers Communicating With China Every 35 Seconds en.sedaily.com · 2026-08-07
- Biggest backdoor yet found in Chinese routers sold under multiple brand names 9to5mac.com · 2026-08-06
- Chinese Zbtlink WiFi routers ship with ENDLESSDOORS malware cyberinsider.com · 2026-08-06
- China's Zbtlink suspends sales of routers found to contain backdoor By Reuters investing.com · 2026-08-06
- Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access securityaffairs.com · 2026-08-07
- Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells thehackernews.com · 2026-08-06
- VulnCheck Says Some Zbtlink Routers Ship With Factory-Installed Remote Access Software ibtimes.sg · 2026-08-08
- Another top router maker accused of firmware having backdoors msn.com · 2026-08-06
- Another top router maker accused of firmware having backdoors — Chinese giant Zbtlink halts downloads to fix issue techradar.com · 2026-08-06
- If you have one of these routers at home, it's best to disconnect it immediately. en.softonic.com · 2026-08-07
- The Skeleton Key in Your Router: How ENDLESSDOORS Turns Every Smart Home Device Into a Liability cryptorank.io · 2026-08-06
- The Zbtlink Backdoor: Why the U.S. Must Pursue Full Strategic Divestment From Chinese Technology Within a Decade martindvasquez.substack.com · 2026-08-11
References
See CVE-2026-66747 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →