Ziroom
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 10
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, Ziroom recorded 10 security vulnerabilities in the last 90 days across 1 products, including 10 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, ZHOME A0101 had the most security vulnerabilities in the Ziroom ecosystem, with 10 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121260Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injectionCVE-2026-102794Ziroom ZHOME A0101 ping command injectionCVE-2026-102793Ziroom ZHOME A0101 set_time_zone command injectionCVE-2026-102792Ziroom ZHOME A0101 set_syslog command injectionCVE-2026-101264Ziroom ZHOME A0101 set_passwd command injection| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-121260Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published11/03/2026 | SeverityCritical |
CVE-2026-102794Ziroom ZHOME A0101 ping command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/29/2026 | |
CVE-2026-102793Ziroom ZHOME A0101 set_time_zone command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/29/2026 | |
CVE-2026-102792Ziroom ZHOME A0101 set_syslog command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/29/2026 | |
CVE-2026-101264Ziroom ZHOME A0101 set_passwd command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/28/2026 | |
CVE-2026-101263Ziroom ZHOME A0101 set_online_client command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/28/2026 | |
CVE-2026-101262Ziroom ZHOME A0101 set_online_client command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/28/2026 | |
CVE-2026-101261Ziroom ZHOME A0101 firstSetup_wifi command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/28/2026 | |
CVE-2026-101260Ziroom ZHOME A0101 firstLogin command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published09/28/2026 | |
CVE-2026-101187Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published | |
CVE-2026-1803Ziroom ZHOME A0101 Dropbear SSH Service default credentials | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published02/03/2026 | |
CVE-2026-1802Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection | Exploitation statusActively exploited | FixNo | Affected productZHOME A0101 | Published02/03/2026 |
12 Results | Page 1 of 1
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityMedium |