CVE-2026-1330

HIGH 7.5CVE-2026-1330 · Published 22/01/2026 · updated 17/06/2026

In short

CVE-2026-1330 is a HIGH (CVSS 7.5) vulnerability affecting meetinghub paperless meetings (hamastar).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.6% of all vulnerabilities.
Fix: update to 2025-12-10 or later.

Package	Affected versions	Patched versions
meetinghub paperless meetings hamastar	`< 2025-12-10`	`2025-12-10`

Description

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

References

twcert.org.tw/en/cp-139-10651-ff09c-2.html · Third Party Advisory
twcert.org.tw/tw/cp-132-10650-a5ee9-1.html · Third Party Advisory

More vulnerabilities in meetinghub paperless meetings

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

meetinghub paperless meetings

hamastar

< 2025-12-10

2025-12-10

More vulnerabilities in meetinghub paperless meetings

See all →