VULNERABILITY INTELLIGENCE

CVE-2025-3361

CVSS score9.8 CRITICAL

EPSS probability1.36%

CISA KEVNot currently listed

Published2025-04-08

Last modified2026-06-17

Description

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.