Skip to content
Threat Feed
Subscribe

Vendor

Ziroom

2 briefs RSS Subscribe to Ziroom alerts
critical advisory

Ziroom ZHOME A0101: Code injection in Lua Handler (CVE-2026-121260)

A flaw in the Lua Handler of Ziroom ZHOME A0101 1.0.1.0 Build 202004151405 allows remote code injection via the loadstring function.

ZHOME A0101
1c
critical advisory

Remote Command Injection in Ziroom ZHOME A0101 USB API

An unauthenticated remote command injection vulnerability in Ziroom ZHOME A0101 version 1.0.1.0 allows attackers to execute arbitrary commands via the USB Device Management API.

ZHOME A0101 cve-2026-101260 remote-code-execution iot vulnerability
3r 3t 1c