CVE-2026-121260 | Ziroom ZHOME A0101 1.0.1.0 Build 202004151405 Lua zrUsb.lua loadstring code injection

SecurityVulns
Yanac

A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. It has been classified as very critical. This issue affects the function loadstring of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component Lua Handler. This manipulation causes code injection.

This vulnerability is registered as CVE-2026-121260. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More