Cpe:2.3:a:ziroom:zhome_a0101:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aziroomzhome_a0101/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 18:02:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZiroom ZHOME A0101: Code injection in Lua Handler (CVE-2026-121260)https://feed.craftedsignal.io/briefs/2026-11-ziroom-zhome-rce/Tue, 03 Nov 2026 18:02:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ziroom-zhome-rce/A flaw in the Lua Handler of Ziroom ZHOME A0101 1.0.1.0 Build 202004151405 allows remote code injection via the loadstring function.A flaw has been identified in the loadstring function of the file usr/lib/lua/luci/controller/api/zrUsb.lua within the Lua Handler component of Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This manipulation results in code injection. The vulnerability is remotely exploitable, and public exploit code is available. The vendor was contacted but did not respond.

]]>criticaladvisory