A security vulnerability has been detected in HummerRisk up to 1.5.0.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 24, 2026 · NIST NVD

   Detected

   A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionality of the file ResourceCreateService.java of the component Cloud Task Scheduler. Such manipulation of the argument regionId leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early abo

2. Jun 17, 2026 · NIST NVD

   Updated

   A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionality of the file ResourceCreateService.java of the component Cloud Task Scheduler. Such manipulation of the argument regionId leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early abo

Affected

• cpe hummerrisk/hummerriskversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2026-3064

  A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionality of the file ResourceCreateService.java of the component Cloud Task Scheduler. Such manipulation of the argument regionId leads to command injection. The atta

  nvd.nist.gov

References

• Exploit · github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com