CVE-2026-74232 evidence review

Zbtlink L3_V2_8, WE826-T2, ZBT-7628

Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmware 3.0.0.4.380, APG721B firmware 19.0809, HK300 firmware 1.0.0.2.032, and MAP-N10 firmware 1.0.0.2.044 ship a backdoor command-and-control implant (yunmgrd) reachable over an unauthenticated cleartext UDP channel to a hardcoded C2 server. A remote unauthenticated attacker on the network path can h...

Open CVE record

Evidence review

This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.

ProductZbtlink L3_V2_8, WE826-T2, ZBT-7628

Affected versions>= 3.0.0.4.528, >= 19.1101, >= 1.0.0.2.007, >= 1.0.0.3.001, >= 1.0.0.2.000, >= 1.0.0.2.014, >= 3.0.0.4.380, >= 19.0809, >= 1.0.0.2.032, >= 1.0.0.2.044

Fixed versionsNo verified fixed-version field is available yet

Priority basisReview · CVSS 9.3 · EPSS -

Identify the product and installed version

Record whether Zbtlink L3_V2_8, WE826-T2, ZBT-7628 is present, where it is installed, and which interfaces are exposed.

Record the product name, package or appliance identifier, and installed version.
Identify internet-facing, administrative, API, and internal access paths.
Preserve the pre-change configuration and relevant service logs.

Compare the affected range

Use the current record as an identification aid: >= 3.0.0.4.528, >= 19.1101, >= 1.0.0.2.007, >= 1.0.0.3.001, >= 1.0.0.2.000, >= 1.0.0.2.014, >= 3.0.0.4.380, >= 19.0809, >= 1.0.0.2.032, >= 1.0.0.2.044. Resolve incomplete inventory results before deciding that an asset is unaffected.

Verify the authoritative remediation source

Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.

Operational boundary

This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.