Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 8 products
🚨 CRITICAL: CVE-2026-38707 (CVSS 9.8) - Command injection in InHand Networks routers (IR302/IR305/IR315/IR615). Remote attackers can gain ROOT privileges via IPSec VPN feature. Patch immediately! #CVE #PatchNow #ThreatIntel https://t.co/CedF0Rykan
Post summary
The tweet announces a critical command injection vulnerability (CVE‑2026‑38707) affecting InHand router models, urges immediate patching, and provides basic technical details.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | inhandnetworks | ir302 | - | - | - |
| OS | inhandnetworks | ir302_firmware | - | - | - |
| HW | inhandnetworks | ir305 | - | - | - |
| OS | inhandnetworks | ir305_firmware | - | - | - |
| HW | inhandnetworks | ir315 | - | - | - |
| OS | inhandnetworks | ir315_firmware | - | - | - |
| HW | inhandnetworks | ir615 | - | - | - |
| OS | inhandnetworks | ir615_firmware | - | - | - |