{"uuid": "dbebc5bc-b3ac-4465-8f0e-0eb03ec4d418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-101264", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117351738528636289", "content": "Ziroom ZHOME A0101 v1.0.1.0 faces a CRITICAL (CVSS 9.4) command injection flaw (CVE-2026-101264) via /api/ZRnetwork/set_passwd. No patch, vendor silent. Restrict API access & monitor closely. https://radar.offseq.com/threat/cve-2026-101264-command-injection-in-ziroom-zhome-a0101-06a3a86bcb9501aa #OffSeq #CVE2026101264 #Infosec #IoT", "creation_timestamp": "2026-09-29T01:30:30.599303Z"}