Description
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 6 repositories
-
b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751 ★ 9 · Jun 27, 2026
OpenSTAManager-RCE-Exploit-CVE-2026-38751
-
UnDefinedCS/CVE-2026-38751-exploit ★ 1 · Oct 30, 2026
Python version of b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751 a rust-based POC
-
hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751- ★ 1 · Jul 1, 2026
OpenSTAManager RCE Exploit (CVE-2026-38751)
-
Wingleszy/HTB-Enigma-walkthrough ★ 0 · Oct 14, 2026
Write-up машины Enigma (HTB). Корпоративная инфраструктура: NFS exposure → Webmail recon → OpenSTAManager RCE (CVE-2026-38751) → прескалация до root через Command Injection в OliveTin API. Полный гай…
-
Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC ★ 0 · Jul 2, 2026
This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the …
-
Why-Shell/CVE-2026-38751 ★ 0 · Jun 28, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | devcode-it/openstamanager | <= 2.10-beta | — | GHSA-rm34-fg4m-39mw |