CVE-2025-7451 PUBLISHED CVSS 9.300000190734863 CRITICAL

The iSherlock developed by Hgiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. This vulnerability has already been exploited. Please update immediately.

EPSS 0.34% · 56.6th percentile

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.34%
56.6th percentile

Affected Products

VendorProductVersions
HgigaiSherlock-maillog-4.50, 0
HgigaiSherlock-smtp-5.50, 0
HgigaiSherlock-smtp-4.50, 0
HgigaiSherlock-maillog-5.50, 0

Timeline

References

Open in Interactive Console →