Vulnerabilities

TI-2026-28185 CVE-2026-38707 · GHSA-rxwx-v72h-6h2m

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28184 CVE-2026-38704 · GHSA-rqq4-2m8x-2xjv

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01269 Published 2026-05-28 No fix listed CWE-77

TI-2026-28183 CVE-2026-38703 · GHSA-v2wr-27g8-qcqh

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

TI-2026-28182 CVE-2026-38702 · GHSA-pgp8-j574-4f6p

A command injection vulnerability exists in the Admin Access feature of InHand Networks…

MEDIUM 51

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2026-05-28 No fix listed CWE-77

Vulnerabilities

Filters

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks…

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks…

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks…

A command injection vulnerability exists in the Admin Access feature of InHand Networks…