CVE-2026-121260

A code injection vulnerability exists in Ziroom ZHOME A0101 (version 1.0.1.0 Build 202004151405) due to the unsafe use of the loadstring function within the Lua Handler component, specifically in the file usr/lib/lua/luci/controller/api/zrUsb.lua. This flaw allows for remote exploitation , where ...