Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6349 OS Command Injection in iSherlock by HGiga Affecting Unauthenticated Local Attackers https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6349
Post summary
The post announces the discovery of a new OS command injection vulnerability (CVE-2026-6349) in iSherlock that can be leveraged by unauthenticated local attackers.
🔍 Today's Top Vulnerabilities 🔴 CVE-2026-5598 | CVSS 10.0 🔴 CVE-2026-6349 | CVSS 10.0 🔴 CVE-2026-20180 | CVSS 9.9 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel
Post summary
The post lists three high‑severity CVEs with a link to a vulnerability portal but offers no PoC, exploit, patch, or active exploitation details.
CVE-2026-6349 The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them … https://www.cve.org/CVERecord?id=CVE-2026-6349
Post summary
The CVE-2026-6349 disclosure highlights an OS Command Injection vulnerability in iSherlock that permits unauthenticated local attackers to execute arbitrary commands.
🚨 CVE-2026-6349: HGiga｜iSh... Perfect 10.0 CVSS with unauthenticated RCE over network - HGiga iSherlock just became every pentester's favorite entry point. #RCE #CVE20266349. https://zerodaysignal.com/vulnerability/CVE-2026-6349 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The message announces a new CVE (2026‑6349) with a 10.0 CVSS unauthenticated RCE and offers a link for more details, but no Proof‑of‑Concept, exploit tool, or patch information is provided.