Skip to content
Threat Feed
Subscribe

Vendor

Devcode

1 brief RSS
critical advisory

OpenSTAManager: Authenticated OS Command Injection (CVE-2025-69212)

OpenSTAManager versions 2.9.8 and earlier contain an authenticated remote code execution vulnerability (CVE-2025-69212) due to improper file path sanitization in the importFE_ZIP plugin.

OpenSTAManager web-application rce vulnerability
1r 2t 1c