CVE-2022-26518

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

• CWE-78
• CWE-78

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1501Exploit, Technical Description, Third Party Advisory
• https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdfVendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1501Exploit, Technical Description, Third Party Advisory
• https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdfVendor Advisory

Published

May 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26512Uncontrolled search path element in the Intel(R) FPGA Add-on…7.3
• CVE-2022-26513Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem soft…9.6
• CVE-2022-26514Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26515Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-26516Authorized users may install a maliciously modified package …7.8
• CVE-2022-26517On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versi…7.5
• CVE-2022-26519There is no limit to the number of attempts to authenticate …5.5
• CVE-2022-2652Depending on the way the format strings in the card label ar…6
• CVE-2022-26520In pgjdbc before 42.3.3, an attacker (who controls the jdbc …9.8
• CVE-2022-26521Abantecart through 1.3.2 allows remote authenticated adminis…7.2
• CVE-2022-26522The socket connection handler in aswArPot.sys in the Avast a…7.8
• CVE-2022-26523The socket connection handler in aswArPot.sys in the Avast a…5.3