Executive brief
OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php
Affected products
- Packagist devcode-it/openstamanager
Junglewise Threat Intelligence
CVE-2026-27012: OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php
CVE-2026-27012 · Severity: low · CVSS 3.1 · Published 2026-03-03
Technologies: devcode-it/openstamanager (Packagist). Vendors: Packagist.
Related threats
- OpenSTAManager HTML injection in group name
- OpenSTAManager arbitrary file upload in module update functionality
- devcode-it OpenSTAManager SQL injection in confronta_righe.php
- OpenSTAManager: SQL Injection via Aggiornamenti Module
- OpenSTAManager Affected by Remote Code Execution via Insecure Deserialization in OAuth2