Hamastar vulnerabilities
Published CVEs affecting Hamastar products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-1332
Medium · 5.3
CWE-306 Jan 22, 2026
HAMASTAR Technology|MeetingHub - Missing Authentication
MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information.
CVE-2026-1331
Critical · 9.8
CWE-434 Jan 22, 2026
AMASTAR Technology|MeetingHub - Arbitrary File Upload
MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
CVE-2026-1330
High · 7.5
CWE-36 Jan 22, 2026
HAMASTAR Technology|MeetingHub - Arbitrary File Read
MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.