Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgruppo) by directly calling modules/utenti/actions.php. This can promote an existing account (e.g. agent) into the Amministratori group as well as demote any user including existing administrators.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-03 | 3 | Disclosure2Patch1 |
| 2026-03-04 | 2 | Disclosure2 |
CVE-2026-27012 Privilege Escalation and Authentication Bypass in OpenSTAManager 2.9.8 and Earlier https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27012
Post summary
The text announces a privilege escalation and authentication bypass vulnerability in OpenSTAManager 2.9.8 and earlier, with no mention of PoC, exploit, patch, or active exploitation.
🔴 CVE-2026-27012 - Critical OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenST... https://www.thehackerwire.com/vulnerability/CVE-2026-27012/ https://t.co/eetw4jKj3S
Post summary
The post announces a privilege escalation and authentication bypass vulnerability in OpenSTAManager 2.9.8 and earlier, providing only basic technical details and no PoC, exploit, or patch information.
[CVE-2026-27012: CRITICAL] Vulnerability in OpenSTAManager 2.9.8 and earlier allows attackers to escalate privileges. Upgrade to the latest version to patch this security flaw. #cybersecurity#cve,CVE-2026-27012,#cybersecurity https://cvefind.com/CVE-2026-27012
Post summary
The post highlights a critical privilege‑escalation flaw in OpenSTAManager and urges users to upgrade to the latest version to mitigate the risk.
🚨*CVE* CVE-2026-27012 OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vu… https://www.cve.org/CVERecord?id=CVE-2026-27012 ----- Traducción: CVE-2026-27012 Ope… http://infoflow.cloud`
Post summary
The post announces CVE-2026-27012, noting a privilege escalation and authentication bypass in OpenSTAManager versions 2.9.8 and earlier, with no mention of PoC, exploit, patch, or active exploitation.
CVE-2026-27012 OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vu… https://www.cve.org/CVERecord?id=CVE-2026-27012
Post summary
The post references CVE-2026-27012, noting a privilege escalation and authentication bypass in OpenSTAManager versions 2.9.8 and earlier, but provides no further details or evidence of exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | devcode | openstamanager | - | - | - |