CVE-2026-38751

OpenSTAManager version 2.10 and earlier is vulnerable to an authenticated arbitrary file upload within the module update functionality (specifically at modules/aggiornamenti/upload_modules.php). The root cause is a lack of proper validation of file contents or execution boundaries when uploading ...