CVE-2026-38751

OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)

Score

CVSS 3.1 7.2 High

Status

Analyzed - cve@mitre.org

Published

2026-05-04

Last modified

2026-05-05

Weaknesses

CWE-434

Affected products

• Openstamanager (Devcode)

References

• https://github.com/devcode-it/openstamanager
• https://github.com/fuutianyii/poc