CVE-2026-93467: HGiga｜OAKlouds - Insecure Deserialization

Published Sep 18, 2026

Updated

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

Affected Software

1 affected component

Hgiga OAKlouds

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OAKlouds-custom_page-2.0 to a version that resolves this vulnerability.
Fixed in 26
Upgrade
Upgrade OAKlouds-custom_page-3.0 to a version that resolves this vulnerability.
Fixed in 26
Upgrade
Upgrade OAKlouds-custom_page-4.0 to a version that resolves this vulnerability.
Fixed in 26

Event History

Sep 18, 2026

CVE Published

via MITRE·02:17 AM

Data Sourced

via MITRE·02:17 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An unauthenticated remote attacker can exploit it. No prior account or user interaction is required.

What must an attacker send to trigger the issue?

The attacker needs to send maliciously crafted serialized content to the affected server. Successful exploitation can result in arbitrary code execution on that server.

What is the potential impact of successful exploitation?

Successful exploitation can allow arbitrary code execution with high impact to confidentiality, integrity, and availability.