Skip to content

CVE-2026-83627

CVE

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
September 5, 2026
Last Seen
September 5, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-83627: Unauthenticated Remote Code Execution Vulnerability Disclosed72.0

A critical vulnerability, CVE-2026-83627, has been identified in Hummingbird versions up to 3.21.0, allowing unauthenticated remote code execution via the cookie name in the page cache debug log. This vulnerability was reported to be actively exploited, with a public proof of concept available. User...

Critical Remote Code Execution Vulnerability in Hummingbird Plugin for WordPress70.5

The Hummingbird plugin for WordPress, versions up to and including 3.21.0, is vulnerable to Remote Code Execution (RCE) due to a flaw in the log_msg() function. This vulnerability allows unauthenticated attackers to inject arbitrary PHP code into a web-accessible log file (wp-content/wphb-logs/page-...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Articles (5)

Related Entities

Zero-day ExploitRemote Code ExecutionCWE-94 - Code InjectionCWE-287 - Improper AuthenticationT1505.003 - Web ShellT1190 - Exploit Public-Facing ApplicationT1059 - Command and Scripting InterpreterT1053 - Scheduled Task/JobWordPressPHP