CVE-2026-6349CWE-78

HGiga｜iSherlock - OS Command Injection

Critical · published April 16, 2026

CVSS v4.0
9.3
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

The

iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02596 · 85.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-04-16T02:24Z
EPSS history
Timeline
  • 16 APR 02:24Z
    HGiga｜iSherlock - OS Command Injection
    cvelistv5