CVE-2025-7451criticalexplotación observadaCWE-78

CVE-2025-7451: fallo crítico en Hgiga iSherlock-maillog-4.5

Hgiga｜iSherlock - OS Command Injection

Publicada el

Seguir esta CVE+ Monitorear iSherlock-maillog-4.5+ Monitorear iSherlock-maillog-5.5

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

50Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Actcvss 9.3epss 1.4%
de la publicación al arma
Publicada en NVD14 jul
VulnCheck11 jul
The iSherlock developed by Hgiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. This vulnerability has already been exploited. Please update immediately.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Hgiga · iSherlock-maillog-4.5Hgiga · iSherlock-maillog-5.5Hgiga · iSherlock-smtp-4.5Hgiga · iSherlock-smtp-5.5