Router

ZBT WE1326

Projects for this device

Replacement firmware

OpenWrt

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup: Firmware replacement; route varies by router
You’ll need: Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Hardware revision not specified: Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified: Open hardware record

Original project github.com

Recorded configuration: 16 MB flash; 512 MB RAM

First installation: GUI OEM

Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded: GUI OEM
Availability recorded by source: Available 2019

Hardware details

Documented hardware

zbt we1326 — device documentation (github.com)ZBT WE1326 — TechInfoDepot (github.com)Documented hardware — Source documentation (openwrt.org)

Processor: MediaTek MT7621AT
Wi-Fi chip: MediaTek MT7603EN
Wi-Fi chip: MediaTek MT7612EN
Flash: 16 MB
Processor: MediaTek MT7621AT
Memory: 512 MB
Wi-Fi chip: MediaTek MT7603EN
Wi-Fi chip: MediaTek MT7612EN

Technical references

ZBT WE1326 — WikiDevi hardware record (github.com) ↗

Security

Saved scan 18 Oct 2026

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published 27 Aug 2026

CVSS 9.3 (v4.0)

WE1326

Zbtlink MQWrt infosrvd Command Injection

CVE-2026-74233

Affected firmware: 19.1101
Fix: Fix details in the linked record

Read VulnCheck CVE record

Details and sources

Public disclosure 27 Aug 2026CVE updated 27 Aug 2026

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain an unauthenticated command injection in the infosrvd service (UDP/9992). A remote unauthenticated attacker can send a crafted UDP packet to execute arbitrary commands as root. The service's authentication uses a hardcoded salt and an all-zero wildcard MAC bypass, rendering it ineffective.

Security advisory zbtlink mqwrt infosrvd command injection — WE1326 (vulncheck.com) ↗

Check more security advisories for this device · CVE.org