← Database

CVE-2026-38716

CRITICAL CVSS: 9.8 Published: 2026-06-18 Modified: 2026-06-22

Description

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.

Affected Platforms

Inhandnetworks Ir915L-Fq39-SInhandnetworks Ir915L-Fq39-S FirmwareInhandnetworks Ir912L-Fq58Inhandnetworks Ir912L-Fq58 Firmware

Weakness Type

CWE-77

References