Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/09/29 12:31 a.m.•14 views

EUVD-2026-88569

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

9.4CVSS7.8AI score0.02362EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/28 11:17 p.m.•14 views

CVE-2026-101261

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

9.4CVSS0.02362EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 10:30 p.m.•8 views

CVE-2026-101261 Ziroom ZHOME A0101 firstSetup_wifi command injection

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

9.4CVSS5.7AI score0.02362EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 10:30 p.m.•22 views

CVE-2026-101261

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in an unspecified part of the /api/ZRnetwork/firstSetup_wifi file, where a manipulation of the login_pwd argument allows for remote command execution. An exploit has been published and may be used...

9.4CVSS7.8AI score0.02362EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 10:30 p.m.•31 views

CVE-2026-101261 Ziroom ZHOME A0101 firstSetup_wifi command injection

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

9.4CVSS0.02362EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•11 views

CVE-2026-101261: Improper Neutralization of Special Elements used in a Command

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

9.4CVSS5.7AI score0.02362EPSS
SaveExploits0References3
Rows per page
Query Builder