https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1332.htmlhttps://patchthecve.com/cve/CVE-2026-1332.htmlWed, 17 Jun 2026 10:15:37 +0000MEDIUM 5.3: MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information.https://patchthecve.com/cve/CVE-2026-1331.htmlhttps://patchthecve.com/cve/CVE-2026-1331.htmlWed, 17 Jun 2026 10:15:36 +0000CRITICAL 9.8: MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.https://patchthecve.com/cve/CVE-2026-1330.htmlhttps://patchthecve.com/cve/CVE-2026-1330.htmlWed, 17 Jun 2026 10:15:36 +0000HIGH 7.5: MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2024-6118.htmlhttps://patchthecve.com/cve/CVE-2024-6118.htmlWed, 17 Jun 2026 08:17:19 +0000CRITICAL 9.1: A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.https://patchthecve.com/cve/CVE-2024-6117.htmlhttps://patchthecve.com/cve/CVE-2024-6117.htmlWed, 17 Jun 2026 08:17:19 +0000HIGH 8.8: A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file.