A vulnerability, which was classified as critical , has been found in Hostbill 2025-11-24/2025-12-01 . The impacted element is an unknown function of the component Registration Handler . Performing a manipulation results in csv injection. This vulnerability is cataloged as CVE-2026-31049 . It is possible to initiate the attack remotely. There is no exploit available.