CVE-2025-11900: HGiga｜iSherlock - OS Command Injection
Published Oct 17, 2025
·Updated
The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Affected Software
1 affected component
Hgiga iSherlock
Remediation
Information
Update iSherlock-smtp-4.5 package to version 774 and later
Update iSherlock-smtp-5.5 package to version 774 and later
Update iSherlock-base-4.5 package to version 440 and later
Update iSherlock-base-5.5 package to version 440 and later
Event History
Oct 17, 2025
CVE Published
via MITRE·03:50 AM
Data Sourced
via MITRE·03:50 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-11900?
CVE-2025-11900 has a high severity due to its ability to allow unauthenticated remote attackers to execute arbitrary OS commands.
2
How do I fix CVE-2025-11900?
To fix CVE-2025-11900, update to the latest version of iSherlock provided by HGiga that addresses this vulnerability.
3
Who is affected by CVE-2025-11900?
The CVE-2025-11900 vulnerability affects users of the iSherlock software developed by HGiga.
4
Can CVE-2025-11900 lead to data breaches?
Yes, CVE-2025-11900 can potentially lead to data breaches since it allows execution of arbitrary commands on the server.
5
Is authentication required to exploit CVE-2025-11900?
No, CVE-2025-11900 can be exploited by attackers without any authentication.