CVE-2025-9174: neurobin shc Filename shc.c make os command injection

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-19 · updated 2026-06-17
Weakness: CWE-77

Description

A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src/shc.c of the component Filename Handler. Executing manipulation can lead to os command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized.

Affected products

neurobin shc: through 4.0.3

References

https://magnificent-dill-351.notion.site/Command-Execution-in-shc-4-0-3-249c693918ed8040abe3e636c7f18c96
https://vuldb.com/?ctiid.320555
https://vuldb.com/?id.320555
https://vuldb.com/?submit.630742
https://magnificent-dill-351.notion.site/Command-Execution-in-shc-4-0-3-249c693918ed8040abe3e636c7f18c96

Get alerted when CVE-2025-9174 or the next vulnerability affects your stack