PT-2026-33249 · Hgiga · Isherlock

Published 2026-04-16 · Updated 2026-04-16 · CVE-2026-6349

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions iSherlock (affected versions not specified)

Description The iSherlock developed by HGiga contains an OS Command Injection flaw. This allows unauthenticated local attackers to inject and execute arbitrary OS commands on the server. OS Command Injection is a flaw that allows an attacker to execute system-level commands on the host operating system via a vulnerable application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-6349

Affected Products

Isherlock

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6349 · Security Note
• https://twitter.com/ctiwatchcloud/status/2044747644120047830 · Twitter Post
• https://twitter.com/CVEnew/status/2044701588422598827 · Twitter Post
• https://twitter.com/0dayPublishing/status/2044610408267284922 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10842-3f255-1.html · Note
• https://twcert.org.tw/en/cp-139-10841-4f504-2.html · Note