HGiga vulnerabilities

🔔 Create alert RSS

Published CVEs affecting HGiga products: 5 record(s), with severity, exploitation and fixes.

C&Cm@il package olln-base 3 iSherlock-base-4.5 1 iSherlock-audit-4.5 1 iSherlock-base-5.5 1 iSherlock-audit-5.5 1 iSherlock 4.5 1 iSherlock 5.5 1

Exploited only (KEV) →

CVE-2026-6349 Critical · 9.8 CWE-78 Apr 16, 2026

HGiga｜iSherlock - OS Command Injection

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

CVE-2026-2236 High · 7.5 CWE-89 Feb 9, 2026

HGiga｜C&Cm@il - SQL Injection

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVE-2026-2235 Medium · 6.5 CWE-89 Feb 9, 2026

HGiga｜C&Cm@il - SQL Injection

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVE-2026-2234 Critical · 9.1 CWE-306 Feb 9, 2026

HGiga C&Cm@il Missing Authentication Vulnerability (CWE-306)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

CVE-2025-11900 Critical · 9.8 CWE-78 Oct 17, 2025

HGiga｜iSherlock - OS Command Injection

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.