Threats tagged 'ghsa-p6w2-cqjh-jpxg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 2.3%	CVE-2026-101260Ziroom ZHOME A0101 · Injection Critical9.4EPSS 2.3%2026-09-29GCVE DatabaseCVE-2026-101260 A critical command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 within the /api/ZRnetwork/firstLogin endpoint. This flaw allows remote attackers with high privileges to execute arbitrary commands by manipulating the firstLogin argument. Public exploit code is available, and the vendor has not responded to disclosure attempts. EPSS 2.3%Report on CVE-2026-101260 Vulnerability CWE-74 #ghsa-p6w2-cqjh-jpxg	GCVE Database	2026-09-29

Page 1 of 1