CVE-2026-1802 | Ziroom ZHOME A0101 1.0.1.0 zrMacClone.lua macAddrClone macType command injection

A vulnerability categorized as critical has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file lucicontrollerapizrMacClone.lua. The manipulation of the argument macType results in command injection.

This vulnerability is cataloged as CVE-2026-1802. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.