CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

RedhatCVE•added 2 days ago•5 views

CVE-2026-38704

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target...

9.8CVSS5.6AI score0.00244EPSS

NVD•added 2026/05/28 5:16 p.m.•8 views

CVE-2026-38702

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target...

9.8CVSS0.00244EPSS

Cvelist•added 2026/05/28 12:0 a.m.•24 views

CVE-2026-38703

Vulnrichment•added 2026/05/28 12:0 a.m.•8 views

CVE-2026-38707

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target device...

Vulnrichment•added 2026/05/28 12:0 a.m.•6 views

CVE-2026-38703

Cvelist•added 2026/05/28 12:0 a.m.•23 views

CVE-2026-38702

ATTACKERKB•added 2026/05/28 12:0 a.m.•6 views

CVE-2026-38702

Vulnrichment•added 2026/05/28 12:0 a.m.•7 views

Exploits0References2

CVE-2026-38704

ATTACKERKB•added 2026/05/28 12:0 a.m.•12 views

CVE-2026-38707

CVE•added 2026/05/28 12:0 a.m.•9 views

Exploits0References2

CVE-2026-38707

Affects InHand Networks IR302 firmware v3.5.108, IR305 v1.0.118, IR315 v1.0.118, IR615 v1.0.118 (and earlier). The issue is a command injection in the IPSec VPN feature that can grant ROOT privileges on remote targets. CVSS 3.1: 9.8 (CRITICAL) with network access, no user interaction, and high im...

9.8CVSS5.8AI score0.00244EPSS

Exploits0References1Affected Software1

CNNVD•added 2026/05/28 12:0 a.m.•7 views

InHand IR Series 安全漏洞

The InHand IR Series is a series of industrial-grade cellular wireless routers produced by InHand Corporation in the United States. The InHand IR Series contains a security vulnerability, which stems from command injection in the ZeroTier VPN function. This vulnerability could allow attackers to...

9.8CVSS5.9AI score0.00244EPSS

Cvelist•added 2026/05/28 12:0 a.m.•23 views

CVE-2026-38707

Cvelist•added 2026/05/28 12:0 a.m.•23 views

CVE-2026-38704

CNNVD•added 2026/05/28 12:0 a.m.•8 views

InHand IR Series 安全漏洞

The InHand IR Series is a series of industrial-grade cellular wireless routers produced by InHand Corporation in the United States. The InHand IR Series contains a security vulnerability, which stems from command injection in the WireGuard VPN function. This vulnerability may allow attackers to...

9.8CVSS5.9AI score0.00244EPSS