Vulnerability Details CVE-2026-38714
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-38714
-
cpe:2.3:h:inhandnetworks:ir912l-fq58:-
-
cpe:2.3:h:inhandnetworks:ir915l-fq39-s:-
-
cpe:2.3:o:inhandnetworks:ir912l-fq58_firmware:*
-
cpe:2.3:o:inhandnetworks:ir915l-fq39-s_firmware:*