CVE-2026-1803

The record

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear SSH Service. This manipulation causes use of default credentials. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected packages

Related vulnerabilities

• CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-1392
• CVE-2026-65313 A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering… CWE-1392
• CVE-2026-68503 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. CWE-1392
• CVE-2026-46386 OpenProject is open-source, web-based project management software. CWE-1392
• CVE-2026-44273 Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default… CWE-1392
• CVE-2026-32652 Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"… CWE-1392
• CVE-2026-50005 Brickcom cameras ship with default credentials that allows any unauthenticated remote… CWE-1392
• CVE-2026-9844 Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology… CWE-1392