What’s Vulnerable › Vulnerabilities

CVE-2025-63721

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-08 · updated 2026-10-15
• Weakness: CWE-502

Description

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.

Affected products

• HummerRisk: through 1.5.0

References

• https://gist.github.com/k1ng0fic3/e8c8c9353fff8fa95e2c2952587e9266
• https://github.com/k1ng0fic3/secrisk/blob/main/README.md
• https://gist.github.com/k1ng0fic3/e8c8c9353fff8fa95e2c2952587e9266
• https://github.com/k1ng0fic3/secrisk/blob/main/README.md

Get alerted when CVE-2025-63721 or the next vulnerability affects your stack