{"vulnerability": "CVE-2026-102794", "sightings": [{"uuid": "64376a39-35c2-4605-9a19-3f9751f2c098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357047775184830", "content": "CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 has a CRITICAL command injection vuln in /api/ZRnetwork/ping (url param). Public exploit available, vendor silent. Remediate ASAP if deployed. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #CVE2026102794 #Infosec #IoT", "creation_timestamp": "2026-09-30T00:00:37.674762Z"}, {"uuid": "de8f8db7-7b6a-49bf-a47c-42059a750c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwozyo6he52m", "content": "Ziroom ZHOME A0101 v1.0.1.0 hit by CRITICAL command injection (CVE-2026-102794). Exploit is public, vendor silent. Assess your exposure and segment devices if possible. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #IoTSecurity #C...", "creation_timestamp": "2026-09-30T00:00:39.962600Z"}, {"uuid": "5a2a77df-e394-4f6d-bc28-b86846fa4d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357754824850920", "content": "CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 is affected by a CRITICAL command injection flaw (CVSS 9.1) in /api/ZRnetwork/ping. No patch, public exploit out. Restrict access & monitor usage. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-ziroom-zhome-a0101-1010-cve-2026-102794-9a56d1624759c7e9 #OffSeq #Vulnerability #InfoSec", "creation_timestamp": "2026-09-30T03:00:26.510849Z"}, {"uuid": "05232ee8-caab-49e9-a6de-430243b87cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwpe26zkws2q", "content": "Ziroom ZHOME A0101 1.0.1.0 has a CRITICAL command injection vuln (CVE-2026-102794). No fix yet \u2014 exploit details public. Limit endpoint access & monitor systems. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-ziroom-zhome-a0101-1010-cve-2026-102794-9a56d1624759c7e9 #OffSeq #Vul...", "creation_timestamp": "2026-09-30T03:00:28.812891Z"}, {"uuid": "33203971-2be3-4377-9703-26e2b9a39e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102794", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwqkpzvuxb2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-102794: A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0\nCVSS 9.1 \u00b7 EPSS 2.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-102794\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-30T14:32:43.187655Z"}]}