critical9.8
CVE-2026-38715
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the lo…
Impact
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inhandnetworks | Ir915l-Fq39-S Firmware | before 1.0.0.r20044 |
| Inhandnetworks | Ir912l-Fq58 Firmware | before 1.0.0.r20044 |