Browse all 5 CVE security advisories affecting HAMASTAR Technology. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Hamastar Technology develops network security appliances focusing on threat detection and prevention. Their products have historically been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, with five CVEs currently documented. Security researchers have identified authentication bypass issues and insecure default configurations in their firmware. While no major public security incidents have been reported, the consistent pattern of vulnerabilities in their web interfaces and administrative panels suggests potential weaknesses in input validation and access control mechanisms. Their products remain in use by organizations requiring network security, though customers should apply patches promptly and harden configurations against known exploitation vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-1332 | HAMASTAR Technology|MeetingHub - Missing Authentication — MeetingHubCWE-306 | 5.3 | Medium | 2026-01-22 |
| CVE-2026-1330 | HAMASTAR Technology|MeetingHub - Arbitrary File Read — MeetingHubCWE-36 | 7.5 | High | 2026-01-22 |
| CVE-2025-6169 | HAMASTAR Technology WIMP website co-construction management platform - SQL Injection — WIMPCWE-89 | 9.8 | Critical | 2025-06-16 |
| CVE-2024-6118 | Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a Password — MeetingHub Paperless MeetingsCWE-256 | 7.8AI | HighAI | 2024-08-05 |
| CVE-2024-6117 | Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type — MeetingHub Paperless MeetingsCWE-434 | 7.8AI | HighAI | 2024-08-05 |
This page lists every published CVE security advisory associated with HAMASTAR Technology. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.