CVE-2025-63721: Hummerrisk

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.

Affected products

• Hummerrisk Hummerrisk: up to and including 1.5.0

Published 2025-12-08. Last modified 2026-06-17.