Threats tagged 'ghsa-m655-382j-6799'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 3.0%	CVE-2026-102792Ziroom ZHOME A0101 · Injection Critical9.4EPSS 3.0%2026-09-30GCVE DatabaseCVE-2026-102792 A critical command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 affecting the set_syslog function in the /api/ZRnetwork/set_syslog endpoint. The flaw allows remote attackers with high privileges to manipulate the conloglevel or log_size arguments to execute arbitrary commands. Public exploit code is available, but no vendor response or patch has been provided. EPSS 3.0%Report on CVE-2026-102792 Vulnerability CWE-74 #ghsa-m655-382j-6799	GCVE Database	2026-09-30

Page 1 of 1