PatchTheCVEir302 firmware vulnerabilities and fixes
Recent CVEs affecting ir302 firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: ir302firmware.
ir302 firmware has 4 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-28. Highest priority: CVE-2026-38702 (score 60/100).
- CVE-2026-38702 CRITICAL 9.8 UPGRADE UPGRADE A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10
- CVE-2026-38703 CRITICAL 9.8 UPGRADE UPGRADE A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.10
- CVE-2026-38707 CRITICAL 9.8 UPGRADE UPGRADE A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108,
- CVE-2026-38704 CRITICAL 9.8 UPGRADE UPGRADE A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.1
FAQ
How do I fix ir302 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ir302 firmware being exploited right now?
None of the tracked ir302 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ir302 firmware CVE should I patch first?
CVE-2026-38702 currently ranks highest (60/100): A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.10.