CVE-2026-3067 - Vulnerability Analysis

Overview

HummerRisk <= 1.5.0 contains a path traversal caused by manipulation in extractTarGZ/extractZip functions in Archive Extraction component, letting remote attackers access arbitrary file paths, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can access arbitrary files on the system, potentially leading to sensitive data exposure or system compromise.

Mitigation

Update to the latest version beyond 1.5.0.

References

• https://vuldb.com/?ctiid.347418
• https://vuldb.com/?id.347418
• https://vuldb.com/?submit.757763
• https://github.com/AnalogyC0de/public_exp/issues/11

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner