CVE-2026-93467

CriticalCVSS 9.8

Published: 18/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

The OAKlouds developed by HGiga has an Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

Risk Assessment

This vulnerability allows an unauthenticated attacker to achieve remote code execution, potentially leading to full server compromise and data breach.

Recommendation

Immediately update OAKlouds to a patched version and restrict network access to the system to trusted sources.

Other vulnerabilities in OAKlouds

CVE-2026-93468High
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files.

Original NVD description (English source)

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.