Loading market data...
← Back to CVE feed

CVE-2026-101262

CRITICAL CVSS 9.1 View on NVD ↗

Description

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Published: Sep 28, 2026 23:17 UTC Modified: Sep 29, 2026 18:57 UTC