Vulnerabilities

TI-2026-84386 CVE-2026-121260 · GHSA-6h5h-86jf-2gf4

Code injection in Ziroom ZHOME A0101 Lua handler

HIGH 76

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00856 Published 2026-11-03 No fix listed CWE-74

TI-2026-65499 CVE-2026-102794 · GHSA-qr4w-cmjh-rw2w

Ziroom ZHOME A0101 ping command injection

HIGH 76

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02362 Published 2026-09-29 No fix listed CWE-74

TI-2026-65498 CVE-2026-102793 · GHSA-rwfq-3993-vxx5

Ziroom ZHOME A0101 set_time_zone command injection

HIGH 76

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.0249 Published 2026-09-29 No fix listed CWE-74

TI-2026-65497 CVE-2026-102792 · GHSA-m655-382j-6799

Ziroom ZHOME A0101 set_syslog command injection

MEDIUM 48

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.03044 Published 2026-09-29 No fix listed CWE-74

TI-2026-65162 CVE-2026-101264 · GHSA-xq84-qxfj-mw42

Ziroom ZHOME A0101 set_passwd command injection

HIGH 76

A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02336 Published 2026-09-28 No fix listed CWE-74

TI-2026-65161 CVE-2026-101263 · GHSA-qh32-hcjf-q463

Ziroom ZHOME A0101 set_online_client command injection

HIGH 76

A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02336 Published 2026-09-28 No fix listed CWE-74

TI-2026-65160 CVE-2026-101262 · GHSA-6x7m-fmhh-589c

Ziroom ZHOME A0101 set_online_client command injection

HIGH 76

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02362 Published 2026-09-28 No fix listed CWE-74

TI-2026-65159 CVE-2026-101261 · GHSA-qxpw-frxp-639m

Ziroom ZHOME A0101 firstSetup_wifi command injection

HIGH 76

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.04236 Published 2026-09-28 No fix listed CWE-74

TI-2026-65158 CVE-2026-101260 · GHSA-p6w2-cqjh-jpxg

Ziroom ZHOME A0101 firstLogin command injection

HIGH 76

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02336 Published 2026-09-28 No fix listed CWE-74

TI-2026-65152 CVE-2026-101187 · GHSA-j25w-p3j6-6ww5

Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

HIGH 76

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02336 Published 2026-09-28 No fix listed CWE-74

TI-2026-01481 CVE-2026-1803 · GHSA-7hq7-f7fv-849c

Ziroom ZHOME A0101 Dropbear SSH Service default credentials

HIGH 75

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00675 Published 2026-02-03 No fix listed CWE-1392

TI-2026-01480 CVE-2026-1802 · GHSA-762j-mg76-ggm9

Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection

HIGH 70

A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.03816 Published 2026-02-03 No fix listed CWE-74

Vulnerabilities

Filters