CVE-2026-93467NVD

Description

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

Severity Level

CRITICAL (9.8)

Published Date

18/09/2026

Last Modified

18/09/2026

Exploitation Status

????

EPSS Score

0.52% (percentile 43.1%)

CVSS Base Metrics

CVSS v3 (3.1)

CRITICAL 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4 (4.0)

CRITICAL 9.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses (CWE)

CWE-502 - CWE-502 Deserialization of Untrusted Data

Affected & Patched Versions

Product	Affected Versions	Patched Version
HGiga OAKlouds-custom_page-2.0	0 - < 26	N/A
HGiga OAKlouds-custom_page-3.0	0 - < 26	N/A
HGiga OAKlouds-custom_page-4.0	0 - < 26	N/A

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.