CVE-2025-7451criticalobserved exploitationCWE-78

CVE-2025-7451: critical vulnerability in Hgiga iSherlock-maillog-4.5

Hgiga｜iSherlock - OS Command Injection

Published

Follow this CVE+ Monitor iSherlock-maillog-4.5+ Monitor iSherlock-maillog-5.5

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 9.3epss 1.4%
from disclosure to weapon
Published on NVDJul 14
VulnCheckJul 11
The iSherlock developed by Hgiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. This vulnerability has already been exploited. Please update immediately.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Hgiga · iSherlock-maillog-4.5Hgiga · iSherlock-maillog-5.5Hgiga · iSherlock-smtp-4.5Hgiga · iSherlock-smtp-5.5