zhome_a0101 vulnerabilities
CVEs whose affected-version data names the zhome_a0101 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
9 CVEsRSS
CVE-2026-102793Critical· 9.1PoCA flaw has been found in Ziroom ZHOME A0101 1.0.1.0
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the argument hostname/zonename causes command injection. It is pos…
CVE-2026-102794Critical· 9.1PoCA vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to command injection. It is possible to launch the atta…
CVE-2026-102792Critical· 9.1A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetwork/set_syslog. The manipulation of the argument conloglevel/log_size results in command injection. The attack may be…
CVE-2026-101263Critical· 9.1PoCA vulnerability was found in Ziroom ZHOME A0101 1.0.1.0
A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/set_online_client. The manipulation of the argument mac results in command injection. It is possible to launch the…
CVE-2026-101264Critical· 9.1PoCA vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0
A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd. This manipulation of the argument password1 causes command injection. The attack can be initiated remote…
CVE-2026-101262Critical· 9.1PoCA vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate th…
CVE-2026-101261Critical· 9.1PoCA flaw has been found in Ziroom ZHOME A0101 1.0.1.0
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_wifi. Executing a manipulation of the argument login_pwd can lead to command injection. The attack may be performed f…
CVE-2026-101260Critical· 9.1PoCA vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. Th…
CVE-2026-101187Critical· 9.1PoCA weakness has been identified in Ziroom ZHOME A0101 1.0.1.0
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of t…