Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-38704

WireGuard VPN Command Injection in InHand Networks Routers Allowing Remote Root Access

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Inhandnetworks
Products
Ir302 Ir302 Firmware Ir305 and 6 more