CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-101262 — A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any wa

Analysis

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_client. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 9.1. Published: 2026-09-28T23:17:01.187.

Indicators of Compromise (2)

CVE (1)
CVE-2026-101262
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Elio Mortgage launches with $5.1m in pre-seed funding

AI-native startup Elio Mortgage has raised $5.1 million in pre-seed funding led by Motive Partners and Social Leverage.

Finextra
MEDIUMVulnerabilityNEW

Circle and Volante partner to help banks integrate stablecoins into payment operations

Payments-as-a-Service specialist Volante Technologies is working with USDC-issuer Circle to help financial institutions integrate stablecoin payment and settlement capabilities into their existing operations.

Finextra
MEDIUMVulnerabilityNEW

Valley Bank to buy digital SME banking platform Bluevine

Regional lender Valley National Bank has agreed to buy SME digital banking platform Bluevine for around $340 million in cash and stock.

Finextra