Security Advisory

CVE-2026-38703

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-28 00:00:00

Last updated 2026-05-28 17:38:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target devices.

← Browse all CVEs View on cve.org ↗