Threats tagged 'ghsa-6x7m-fmhh-589c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 2.4%	CVE-2026-101262Ziroom ZHOME A0101 · Injection Critical9.4EPSS 2.4%2026-09-29GCVE DatabaseCVE-2026-101262 Ziroom ZHOME A0101 version 1.0.1.0 contains a critical command injection vulnerability in the /api/ZRQos/set_online_client endpoint. The vulnerability arises from improper handling of the 'ip' argument, allowing remote attackers with high privileges to execute arbitrary commands. Public exploit code has been disclosed, and the vendor has not responded to the disclosure. EPSS 2.4%Report on CVE-2026-101262 Vulnerability CWE-74 #ghsa-6x7m-fmhh-589c	GCVE Database	2026-09-29

Page 1 of 1