InHand Networks

Records64All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

4 records in Ir305 Firmware · all components

TI-2026-28185 CVE-2026-38707 · GHSA-rxwx-v72h-6h2m

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28184 CVE-2026-38704 · GHSA-rqq4-2m8x-2xjv

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2026-05-28 No fix listed CWE-77

TI-2026-28183 CVE-2026-38703 · GHSA-v2wr-27g8-qcqh

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28182 CVE-2026-38702 · GHSA-pgp8-j574-4f6p

A command injection vulnerability exists in the Admin Access feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

Open these records in search →

Critical	28
High	25
Medium	11
Low	0
No CVSS	0