InHand Networks

Records64All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

InHand Networks records in CISA KEV

No InHand Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ir302 Firmware 25 records HIGH Ir615 Firmware 17 records MEDIUM Inrouter 900 Firmware 12 records MEDIUM Inrouter302 Firmware 9 records HIGH Inrouter615-s Firmware 5 records MEDIUM Ir912l-fq58 Firmware 5 records MEDIUM Ir915l-fq39-s Firmware 5 records MEDIUM Ir305 Firmware 4 records MEDIUM

Records

5 records in Ir915l-fq39-s Firmware · all components

TI-2026-28194 CVE-2026-38717 · GHSA-qfcf-8pf2-288v

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

TI-2026-28193 CVE-2026-38716 · GHSA-x626-h7w8-hpmr

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

TI-2026-28192 CVE-2026-38715 · GHSA-92wr-794c-2vj6

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

TI-2026-28191 CVE-2026-38714 · GHSA-3377-mfxj-gx66

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

MEDIUM 53

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02307 Published 2026-06-18 No fix listed CWE-77

TI-2026-28195 CVE-2026-38718 · GHSA-ph56-37vq-qfxg

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions)…

LOW 39

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-06-18 No fix listed CWE-120

Open these records in search →

Critical	28
High	25
Medium	11
Low	0
No CVSS	0