HAMASTAR Technology MeetingHub Arbitrary File Upload Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing arbitrary file upload has been identified in MeetingHub, a product developed by HAMASTAR Technology. This vulnerability enables unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. The issue is present in MeetingHub versions prior to the patch released on December 10, 2025.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where MeetingHub is installed.

Remediation

Users are advised to install the patch for version 20251210 or later.

Added: Jan 22, 2026, 9:19 AM
Updated: Jan 22, 2026, 9:19 AM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
10.0
exploitability
7.0
remediation
7.7
relevance
2.3
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.