VULNERABILITY INTELLIGENCE

CVE-2026-38702

CVSS score9.8 CRITICAL
EPSS probability1.24%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-77

Primary references