CVE-2026-6349 CRITICAL

CVE-2026-6349: HGiga｜iSherlock - OS Command Injection

Vendor Hgiga
Product iSherlock-base-4.5
Weakness CWE-78
Published April 16, 2026
Last update April 24, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Key dates

02Disclosure timeline

April 16, 2026 CVE published
April 24, 2026 Record updated