CVE-2026-1802: Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection
A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file luci\controller\api\zrMacClone.lua. The manipulation of the argument macType results in command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1802?
CVE-2026-1802 has a high severity rating due to the potential for command injection, which can compromise the system's integrity.
How do I fix CVE-2026-1802?
To mitigate CVE-2026-1802, update to the latest firmware version of the Ziroom ZHOME A0101 that patches this vulnerability.
What are the implications of CVE-2026-1802?
The implications of CVE-2026-1802 include unauthorized command execution, which can lead to system takeover or data breach.
Who is affected by CVE-2026-1802?
CVE-2026-1802 affects users of the Ziroom ZHOME A0101 version 1.0.1.0 specifically.
What is the attack vector for CVE-2026-1802?
The attack vector for CVE-2026-1802 is the macAddrClone function in the zrMacClone.lua file, where user input is manipulated.