VulnCheck has revealed two previously undocumented factory implants, SPEAKINGSTONE (CVE-2026-74232) and DARKLANTERN (CVE-2026-74233), in firmware for routers manufactured by Shenzhen Zhibotong Electronics (ZBT). These implants grant unauthenticated remote attackers root access to affected devices. Given that ZBT routers are often white-labeled, an untold number of devices worldwide could be vulnerable.