vulnerability.circl.lu CVE-2026-83627: Unauthenticated Remote Code Execution Vulnerability Disclosed
Article Content
- •CVE-2026-83627 allows unauthenticated remote code execution in Hummingbird <=3.21.0.
- •Public proof of concept and active exploitation have been confirmed.
- •Users are advised to apply patches immediately to mitigate risks.
A critical vulnerability, CVE-2026-83627, has been identified in Hummingbird versions up to 3.21.0, allowing unauthenticated remote code execution via the cookie name in the page cache debug log. This vulnerability was reported to be actively exploited, with a public proof of concept available. Users of Hummingbird are urged to patch their systems immediately, as the vulnerability has been confirmed as successfully patched by the reporting user. The vulnerability affects a wide range of users relying on Hummingbird for speed optimization, caching, and CDN functionalities. Detection rules for this vulnerability are available from Rulezet. The vulnerability was published on September 5, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-83627 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…