CVE-2025-11900

Summary

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.

Affected Software

VendorProductVersion RangeStatus
HGigaiSherlock 4.50 < 774affected
HGigaiSherlock 4.50 < 440affected
HGigaiSherlock 5.50 < 774affected
HGigaiSherlock 5.50 < 440affected

Weaknesses

  • CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References