🔐 CVE Alert

CVE-2026-6349

UNKNOWN 0.0

HGiga|iSherlock - OS Command Injection

CVSS Score
0.0
EPSS Score
0.9%
EPSS Percentile
76th

The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

CWE CWE-78
Vendor hgiga
Product isherlock-base-4.5
Published Apr 16, 2026
Last Updated Apr 16, 2026
Stay Ahead of the Next One

Get instant alerts for hgiga isherlock-base-4.5

Be the first to know when new unknown vulnerabilities affecting hgiga isherlock-base-4.5 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

HGiga / iSherlock-base-4.5
0 < 476
HGiga / iSherlock-audit-4.5
0 < 261
HGiga / iSherlock-base-5.5
0 < 476
HGiga / iSherlock-audit-5.5
0 < 261

References

NVD ↗ CVE.org ↗ EPSS Data ↗
twcert.org.tw: https://www.twcert.org.tw/tw/cp-132-10842-3f255-1.html twcert.org.tw: https://www.twcert.org.tw/en/cp-139-10841-4f504-2.html