MikeTrendsTrends right now

search

CVE-2026-102794

Trends

  1. 1
    Critical command injection flaw found in Ziroom ZHOME smart home app●CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 is affected by a CRITICAL command injection flaw (CVSS 9.1) in /api/ZRnetwoMmastodonTechnologyCybersecurity19 h ago

    A critical vulnerability, tracked as CVE-2026-102794, has been disclosed in Ziroom ZHOME A0101 version 1.0.1.0. The command injection flaw, rated 9.1 on the CVSS scale, sits in the /api/ZRnetwork/ping endpoint. No patch is available and a public exploit already exists, so users are being urged to restrict access to affected devices and monitor their usage while awaiting a fix from Ziroom.