CVE-2026-101264 Ziroom ZHOME A0101 set_passwd command injection

A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/setpasswd. This manipulation of the argument password1 causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-101264

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in an unknown function within the /api/ZRnetwork/set_passwd file, where manipulation of the password1 argument allows for remote execution. The exploit has been publicly disclosed and may be utili...

CVE-2026-101263

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw resides in the processing of the /api/ZRQos/set_online_client file, where manipulating the mac argument allows for remote command execution. While the vendor has not responded to the disclosure, the exploit ...

CVE-2026-101263 Ziroom ZHOME A0101 set_online_client command injection

A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/setonlineclient. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...

CVE-2026-101263 Ziroom ZHOME A0101 set_online_client command injection

A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/setonlineclient. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...

CVE-2026-101262 Ziroom ZHOME A0101 set_online_client command injection

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/setonlineclient. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2026-101262 Ziroom ZHOME A0101 set_online_client command injection

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/setonlineclient. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2026-101262

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw resides in the set_online_client functionality located at the /api/ZRQos/set_online_client endpoint. By manipulating the ip argument, a remote attacker can execute arbitrary commands. The exploit has been pu...

CVE-2026-101261

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in an unspecified part of the /api/ZRnetwork/firstSetup_wifi file, where a manipulation of the login_pwd argument allows for remote command execution. An exploit has been published and may be used...

CVE-2026-101261 Ziroom ZHOME A0101 firstSetup_wifi command injection

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

CVE-2026-101261 Ziroom ZHOME A0101 firstSetup_wifi command injection

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

[slackware-security] groff

New groff packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/groff-1.24.2-i586-1slack15.0.txz: Upgraded. This release corrects command injection security vulnerabilities CWE-78 in the mmroff,...

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-101260

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located within an unknown functionality of the /api/ZRnetwork/firstLogin file, where manipulating the firstLogin argument allows for remote command execution. The vulnerability has a CRITICAL severity rat...

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187

A command injection vulnerability exists in the USB Device Management API of Ziroom ZHOME A0101 version 1.0.1.0. The flaw is located in the pop_usb_device function within the file usr/lib/lua/luci/controller/api/zrUsb.lua. By manipulating the argument path, an attacker can execute arbitrary comma...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

EUVD-2026-88546

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...