CVE-2022-26780

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_init` function. Controlling the `user_define_timeout` nvram variable can lead to remote code execution.

• CWE-20
• CWE-20

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481Exploit, Third Party Advisory
• https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdfVendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1481Exploit, Third Party Advisory
• https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdfVendor Advisory

Published

May 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26775An integer overflow was addressed with improved input valida…9.8
• CVE-2022-26776This issue was addressed with improved checks. This issue is…9.8
• CVE-2022-26777Zoho ManageEngine Remote Access Plus before 10.1.2137.15 all…5.3
• CVE-2022-26778Veritas System Recovery (VSR) 18 and 21 stores a network des…6.5
• CVE-2022-26779Apache CloudStack prior to 4.16.1.0 used insecure random num…7.5
• CVE-2022-2678A vulnerability was found in SourceCodester Alphaware Simple…8.8
• CVE-2022-26781Multiple improper input validation vulnerabilities exists in…8.8
• CVE-2022-26782Multiple improper input validation vulnerabilities exists in…8.8
• CVE-2022-26783Windows Hyper-V Shared Virtual Hard Disks Information Disclo…6.5
• CVE-2022-26784Windows Cluster Shared Volume (CSV) Denial of Service Vulner…6.5
• CVE-2022-26785Windows Hyper-V Shared Virtual Hard Disks Information Disclo…6.5
• CVE-2022-26786Windows Print Spooler Elevation of Privilege Vulnerability7.8