CVE-2026-27012
1 advisory.
Packagist/devcode-it/openstamanager CVE-2026-27012: critical 9.8, EPSS 0.69%
OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-247v-7cw6-q57v
- https://github.com/devcode-it/openstamanager/security/advisories/GHSA-247v-7cw6-q57v
- https://github.com/devcode-it/openstamanager
CVE-2026-27012 · published · modified · JSON