Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-6349

HGiga|iSherlock - OS Command Injection

Description

The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HGiga iSherlock-base-4.5

Default version status: unaffected

  • 0 to < 476affected

HGiga iSherlock-audit-4.5

Default version status: unaffected

  • 0 to < 261affected

HGiga iSherlock-base-5.5

Default version status: unaffected

  • 0 to < 476affected

HGiga iSherlock-audit-5.5

Default version status: unaffected

  • 0 to < 261affected

References