CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-27012

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgruppo) by directly calling modules/utenti/actions.php. This can promote an existing account (e.g. agent) into the Amministratori group as well as demote any user including existing administrators.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.5%

CVSS Severity

CVSS v3 Score 9.8

References

https://github.com/devcode-it/openstamanager/security/advisories/GHSA-247v-7cw6-q57v

Products affected by CVE-2026-27012

Devcode » Openstamanager » Version: 2.3

cpe:2.3:a:devcode:openstamanager:2.3
Devcode » Openstamanager » Version: 2.3.1

cpe:2.3:a:devcode:openstamanager:2.3.1
Devcode » Openstamanager » Version: 2.4

cpe:2.3:a:devcode:openstamanager:2.4
Devcode » Openstamanager » Version: 2.4.1

cpe:2.3:a:devcode:openstamanager:2.4.1
Devcode » Openstamanager » Version: 2.4.10

cpe:2.3:a:devcode:openstamanager:2.4.10
Devcode » Openstamanager » Version: 2.4.11

cpe:2.3:a:devcode:openstamanager:2.4.11
Devcode » Openstamanager » Version: 2.4.12

cpe:2.3:a:devcode:openstamanager:2.4.12
Devcode » Openstamanager » Version: 2.4.13

cpe:2.3:a:devcode:openstamanager:2.4.13
Devcode » Openstamanager » Version: 2.4.14

cpe:2.3:a:devcode:openstamanager:2.4.14
Devcode » Openstamanager » Version: 2.4.15

cpe:2.3:a:devcode:openstamanager:2.4.15
Devcode » Openstamanager » Version: 2.4.16

cpe:2.3:a:devcode:openstamanager:2.4.16
Devcode » Openstamanager » Version: 2.4.17

cpe:2.3:a:devcode:openstamanager:2.4.17
Devcode » Openstamanager » Version: 2.4.17.1

cpe:2.3:a:devcode:openstamanager:2.4.17.1
Devcode » Openstamanager » Version: 2.4.18

cpe:2.3:a:devcode:openstamanager:2.4.18
Devcode » Openstamanager » Version: 2.4.19

cpe:2.3:a:devcode:openstamanager:2.4.19
Devcode » Openstamanager » Version: 2.4.2

cpe:2.3:a:devcode:openstamanager:2.4.2
Devcode » Openstamanager » Version: 2.4.20

cpe:2.3:a:devcode:openstamanager:2.4.20
Devcode » Openstamanager » Version: 2.4.21

cpe:2.3:a:devcode:openstamanager:2.4.21
Devcode » Openstamanager » Version: 2.4.22

cpe:2.3:a:devcode:openstamanager:2.4.22
Devcode » Openstamanager » Version: 2.4.23

cpe:2.3:a:devcode:openstamanager:2.4.23
Devcode » Openstamanager » Version: 2.4.24

cpe:2.3:a:devcode:openstamanager:2.4.24
Devcode » Openstamanager » Version: 2.4.25

cpe:2.3:a:devcode:openstamanager:2.4.25
Devcode » Openstamanager » Version: 2.4.26

cpe:2.3:a:devcode:openstamanager:2.4.26
Devcode » Openstamanager » Version: 2.4.27

cpe:2.3:a:devcode:openstamanager:2.4.27
Devcode » Openstamanager » Version: 2.4.28

cpe:2.3:a:devcode:openstamanager:2.4.28
Devcode » Openstamanager » Version: 2.4.29

cpe:2.3:a:devcode:openstamanager:2.4.29
Devcode » Openstamanager » Version: 2.4.3

cpe:2.3:a:devcode:openstamanager:2.4.3
Devcode » Openstamanager » Version: 2.4.30

cpe:2.3:a:devcode:openstamanager:2.4.30
Devcode » Openstamanager » Version: 2.4.31

cpe:2.3:a:devcode:openstamanager:2.4.31
Devcode » Openstamanager » Version: 2.4.32

cpe:2.3:a:devcode:openstamanager:2.4.32
Devcode » Openstamanager » Version: 2.4.33

cpe:2.3:a:devcode:openstamanager:2.4.33
Devcode » Openstamanager » Version: 2.4.34

cpe:2.3:a:devcode:openstamanager:2.4.34
Devcode » Openstamanager » Version: 2.4.35

cpe:2.3:a:devcode:openstamanager:2.4.35
Devcode » Openstamanager » Version: 2.4.36

cpe:2.3:a:devcode:openstamanager:2.4.36
Devcode » Openstamanager » Version: 2.4.37

cpe:2.3:a:devcode:openstamanager:2.4.37
Devcode » Openstamanager » Version: 2.4.38

cpe:2.3:a:devcode:openstamanager:2.4.38
Devcode » Openstamanager » Version: 2.4.39

cpe:2.3:a:devcode:openstamanager:2.4.39
Devcode » Openstamanager » Version: 2.4.4

cpe:2.3:a:devcode:openstamanager:2.4.4
Devcode » Openstamanager » Version: 2.4.40

cpe:2.3:a:devcode:openstamanager:2.4.40
Devcode » Openstamanager » Version: 2.4.41

cpe:2.3:a:devcode:openstamanager:2.4.41
Devcode » Openstamanager » Version: 2.4.42

cpe:2.3:a:devcode:openstamanager:2.4.42
Devcode » Openstamanager » Version: 2.4.43

cpe:2.3:a:devcode:openstamanager:2.4.43
Devcode » Openstamanager » Version: 2.4.44

cpe:2.3:a:devcode:openstamanager:2.4.44
Devcode » Openstamanager » Version: 2.4.45

cpe:2.3:a:devcode:openstamanager:2.4.45
Devcode » Openstamanager » Version: 2.4.46

cpe:2.3:a:devcode:openstamanager:2.4.46
Devcode » Openstamanager » Version: 2.4.47

cpe:2.3:a:devcode:openstamanager:2.4.47
Devcode » Openstamanager » Version: 2.4.48

cpe:2.3:a:devcode:openstamanager:2.4.48
Devcode » Openstamanager » Version: 2.4.49

cpe:2.3:a:devcode:openstamanager:2.4.49
Devcode » Openstamanager » Version: 2.4.5

cpe:2.3:a:devcode:openstamanager:2.4.5
Devcode » Openstamanager » Version: 2.4.50

cpe:2.3:a:devcode:openstamanager:2.4.50
Devcode » Openstamanager » Version: 2.4.51

cpe:2.3:a:devcode:openstamanager:2.4.51
Devcode » Openstamanager » Version: 2.4.52

cpe:2.3:a:devcode:openstamanager:2.4.52
Devcode » Openstamanager » Version: 2.4.53

cpe:2.3:a:devcode:openstamanager:2.4.53
Devcode » Openstamanager » Version: 2.4.54

cpe:2.3:a:devcode:openstamanager:2.4.54
Devcode » Openstamanager » Version: 2.4.6

cpe:2.3:a:devcode:openstamanager:2.4.6
Devcode » Openstamanager » Version: 2.4.7

cpe:2.3:a:devcode:openstamanager:2.4.7
Devcode » Openstamanager » Version: 2.4.8

cpe:2.3:a:devcode:openstamanager:2.4.8
Devcode » Openstamanager » Version: 2.4.9

cpe:2.3:a:devcode:openstamanager:2.4.9
Devcode » Openstamanager » Version: 2.5

cpe:2.3:a:devcode:openstamanager:2.5
Devcode » Openstamanager » Version: 2.5.1

cpe:2.3:a:devcode:openstamanager:2.5.1
Devcode » Openstamanager » Version: 2.5.2

cpe:2.3:a:devcode:openstamanager:2.5.2
Devcode » Openstamanager » Version: 2.5.3

cpe:2.3:a:devcode:openstamanager:2.5.3
Devcode » Openstamanager » Version: 2.5.4

cpe:2.3:a:devcode:openstamanager:2.5.4
Devcode » Openstamanager » Version: 2.5.5

cpe:2.3:a:devcode:openstamanager:2.5.5
Devcode » Openstamanager » Version: 2.5.6

cpe:2.3:a:devcode:openstamanager:2.5.6
Devcode » Openstamanager » Version: 2.5.7

cpe:2.3:a:devcode:openstamanager:2.5.7
Devcode » Openstamanager » Version: 2.6

cpe:2.3:a:devcode:openstamanager:2.6
Devcode » Openstamanager » Version: 2.6.1

cpe:2.3:a:devcode:openstamanager:2.6.1
Devcode » Openstamanager » Version: 2.6.2

cpe:2.3:a:devcode:openstamanager:2.6.2
Devcode » Openstamanager » Version: 2.7

cpe:2.3:a:devcode:openstamanager:2.7
Devcode » Openstamanager » Version: 2.7.1

cpe:2.3:a:devcode:openstamanager:2.7.1
Devcode » Openstamanager » Version: 2.7.2

cpe:2.3:a:devcode:openstamanager:2.7.2
Devcode » Openstamanager » Version: 2.7.3

cpe:2.3:a:devcode:openstamanager:2.7.3
Devcode » Openstamanager » Version: 2.8

cpe:2.3:a:devcode:openstamanager:2.8
Devcode » Openstamanager » Version: 2.8.1

cpe:2.3:a:devcode:openstamanager:2.8.1
Devcode » Openstamanager » Version: 2.8.2

cpe:2.3:a:devcode:openstamanager:2.8.2
Devcode » Openstamanager » Version: 2.8.3

cpe:2.3:a:devcode:openstamanager:2.8.3
Devcode » Openstamanager » Version: 2.9

cpe:2.3:a:devcode:openstamanager:2.9
Devcode » Openstamanager » Version: 2.9.1

cpe:2.3:a:devcode:openstamanager:2.9.1
Devcode » Openstamanager » Version: 2.9.2

cpe:2.3:a:devcode:openstamanager:2.9.2
Devcode » Openstamanager » Version: 2.9.3

cpe:2.3:a:devcode:openstamanager:2.9.3
Devcode » Openstamanager » Version: 2.9.4

cpe:2.3:a:devcode:openstamanager:2.9.4
Devcode » Openstamanager » Version: 2.9.5

cpe:2.3:a:devcode:openstamanager:2.9.5
Devcode » Openstamanager » Version: 2.9.6

cpe:2.3:a:devcode:openstamanager:2.9.6
Devcode » Openstamanager » Version: 2.9.7

cpe:2.3:a:devcode:openstamanager:2.9.7
Devcode » Openstamanager » Version: 2.9.8

cpe:2.3:a:devcode:openstamanager:2.9.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-27012

Products

Pricing

Contact Us