critical9.8
CVE-2026-38716
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Py…
Impact
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inhandnetworks | Ir915l-Fq39-S Firmware | before 1.0.0.r20044 |
| Inhandnetworks | Ir912l-Fq58 Firmware | before 1.0.0.r20044 |