PT-2026-29744 · Unknown · Openstamanager

Ormzro · Published 2026-04-02 · Updated 2026-04-05 · CVE-2026-35168

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenSTAManager versions prior to 2.10.2

Description The OpenSTAManager software contains a flaw in the Aggiornamenti (Updates) module. This module includes a database conflict resolution feature that accepts a JSON array of SQL statements via POST requests to the op=risolvi-conflitti-database endpoint and executes them directly against the database without validation or sanitization. An authenticated attacker with access to the Aggiornamenti module can execute arbitrary SQL statements, including commands like CREATE, DROP, ALTER, INSERT, UPDATE, DELETE, and SELECT INTO OUTFILE. Foreign key checks are disabled before execution, reducing database integrity protections.

Recommendations Update OpenSTAManager to version 2.10.2 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-35168

GHSA-2FR7-CC4F-WH98

Affected Products

Openstamanager

References · 9

• 🔥 https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2fr7-cc4f-wh98 · Exploit
• https://github.com/devcode-it/openstamanager/commit/43970676bcd6636ff8663652fd82579f737abb74 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-35168 · Security Note
• https://osv.dev/vulnerability/GHSA-2fr7-cc4f-wh98 · Vendor Advisory
• https://github.com/devcode-it/openstamanager/releases/tag/v2.10.2 · Note
• https://github.com/devcode-it/openstamanager · Note
• https://twitter.com/CveFindCom/status/2039715430898532489 · Twitter Post
• https://twitter.com/TheHackerWire/status/2040637925717897417 · Twitter Post
• https://twitter.com/CVEnew/status/2039744345503379740 · Twitter Post