CVE-20XX-?
agent?

Devcode Openstamanager CVEs.

Published CVEs affecting Devcode Openstamanager, ranked by exploit odds.

1 CVEs · updated 2026-11-06 21:21 UTC

Reset all
  1. CVE-2026-27012

    OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgruppo) by directly calling modules/utenti/actions.php. This can promote an existing account (e.g. agent) into the Amministratori group as well as demote any user including existing administrators.

    Auth & access Web app Devcode Openstamanager

    9.8 CRITICAL 0.6% exploit odds Fix listed

All CVEs affecting Devcode Openstamanager that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.