Home

Description

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field

PUBLISHED Reserved 2026-03-09 | Published 2026-04-14 | Updated 2026-04-16 | Assigner mitre

References

hostbillapp.com/changelog

hostbillapp.com/release-notes/11-27-2025.html

blog.hostbillapp.com/2025/12/03/hostbill-security-advisory/

hostbillapp.com/responsible-disclosure

hostbillapp.com/release-notes/12-01-2025.html

github.com/...de Validation/Registration fields & Import Csv

cve.org (CVE-2026-31049)

nvd.nist.gov (CVE-2026-31049)

Download JSON