CVE-2026-1803
Ziroom ZHOME A0101 Dropbear SSH Service default credentials
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear SSH Service. This manipulation causes use of default credentials. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-1392 |
| Vendor | ziroom |
| Product | zhome a0101 |
| Published | Feb 3, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for ziroom zhome a0101
Be the first to know when new high vulnerabilities affecting ziroom zhome a0101 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Ziroom / ZHOME A0101
1.0.1.0
References
vuldb.com: https://vuldb.com/?id.343976 vuldb.com: https://vuldb.com/?ctiid.343976 vuldb.com: https://vuldb.com/?submit.745497 vuldb.com: https://vuldb.com/?submit.745529 github.com: https://github.com/Blackhole23-Lab/-/blob/main/vulns/ssh-backdoor.md github.com: https://github.com/Blackhole23-Lab/-/blob/main/vulns/ssh-backdoor.md#proof-of-concept
Credits
🔍 xxyNB (VulDB User)