CVE-2022-26510: Inhandnetworks IR302 Firmware

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

• Inhandnetworks IR302 Firmware: version 3.5.37 only

Published 2022-05-12. Last modified 2026-06-17.