Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-38714 2 Inhand, Inhandnetworks 6 Ir912, Ir915, Ir912l-fq58 and 3 more 2026-06-24 9.8 Critical
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38715 1 Inhandnetworks 6 Ir912, Ir912l-fq58, Ir912l-fq58 Firmware and 3 more 2026-06-24 9.8 Critical
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38716 1 Inhandnetworks 6 Ir912, Ir912l-fq58, Ir912l-fq58 Firmware and 3 more 2026-06-24 9.8 Critical
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38717 1 Inhandnetworks 5 Ir912, Ir912l-fq58, Ir912l-fq58 Firmware and 2 more 2026-06-24 9.8 Critical
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function. The vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
CVE-2026-38718 2 Inhand, Inhandnetworks 6 Ir912, Ir915, Ir912l-fq58 and 3 more 2026-06-24 7.5 High
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function. This vulnerability could allow an attacker to cause a denial of service attack on the remote target device.