


Perceptive Security
SOC/SIEM Consultancy

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.11…
Published:
27 May 2026 at 22:00:00
Alert date:
28 May 2026 at 20:05:25
Source:
nvd.nist.gov
Network Infrastructure, Mobile & IoT
A critical command injection vulnerability exists in the Admin Access feature of multiple InHand Networks router models including IR302, IR305, IR315, and IR615. The vulnerability affects firmware versions V3.5.108 for IR302 and V1.0.118 for IR305, IR315, and IR615, along with earlier versions. Attackers can exploit this vulnerability to gain ROOT privileges on remote target devices. This represents a significant security risk for network infrastructure as it allows complete system compromise. The vulnerability is classified as high severity due to the potential for complete device takeover.
Technical details
Mitigation steps:
Affected products:
InHand Networks IR302
InHand Networks IR305
InHand Networks IR315
InHand Networks IR615
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-38702
https://www.inhand.com/wp-content/uploads/InHand-PSA-2026-05_EN.pdf
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
