PatchTheCVE: ir915l-fq39-s firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-38718: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to cohttps://patchthecve.com/cve/CVE-2026-38718.htmlhttps://patchthecve.com/cve/CVE-2026-38718.htmlMon, 22 Jun 2026 17:49:00 +0000HIGH 7.5: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability in the device registration function. This vulnerability could allow an attacker to cause a denial of service attack on the remote target device.CVE-2026-38717: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to cohttps://patchthecve.com/cve/CVE-2026-38717.htmlhttps://patchthecve.com/cve/CVE-2026-38717.htmlMon, 22 Jun 2026 17:48:43 +0000CRITICAL 9.8: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the file upload function. The vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.CVE-2026-38716: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to cohttps://patchthecve.com/cve/CVE-2026-38716.htmlhttps://patchthecve.com/cve/CVE-2026-38716.htmlMon, 22 Jun 2026 17:48:52 +0000CRITICAL 9.8: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python application export function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.CVE-2026-38715: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to cohttps://patchthecve.com/cve/CVE-2026-38715.htmlhttps://patchthecve.com/cve/CVE-2026-38715.htmlMon, 22 Jun 2026 17:48:35 +0000CRITICAL 9.8: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.CVE-2026-38714: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to cohttps://patchthecve.com/cve/CVE-2026-38714.htmlhttps://patchthecve.com/cve/CVE-2026-38714.htmlMon, 22 Jun 2026 17:47:33 +0000CRITICAL 9.8: InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Python configuration function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.