Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-38751

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenSTAManager是Devcode开源的一个用于技术援助和计费的开源管理软件。 OpenSTAManager 2.10及之前版本存在代码问题漏洞，该漏洞源于模块更新功能中存在任意文件上传漏洞。

AI Predicted 7.5 Difficulty: Easy EPSS 0.46% · P41 Updated May 05, 2026

In-the-Wild Activity Observed github_trending · low

Possible ATT&CK Techniques 1 AI

T1505.003 · Web Shell

Affected Version Matrix 1

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-38751

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

OpenSTAManager 代码问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2026-38751

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-38751

请登录查看更多情报信息。

Proof of Concept for CVE-2026-38751 (1)

🔗 GitHub - fuutianyii/poc: For CVE-2026-38751 · GitHub Read full article

Vendor Pages for CVE-2026-38751 (1)

🔗 GitHub - devcode-it/openstamanager: OpenSTAManager è un software gestionale open-source basato su web, sviluppato in PHP con database MySQL. Serve a gestire l'assistenza tecnica e la fatturazione elettronica per piccole e medie imprese. Include moduli per la contabilità, la gestione del magazzino, le anagrafiche di clienti e fornitori, i documenti di vendita e acquisto. · GitHub

https://www.cve.org/CVERecord?id=CVE-2026-38751

Same Patch Batch · n/a · 2026-05-04 · 17 CVEs total

CVE-2026-7733	7.3 HIGH	funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted uploa
CVE-2026-31205	5.7 MEDIUM	Pluck CMS 跨站脚本漏洞
CVE-2026-7781	4.3 MEDIUM	Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_upda
CVE-2026-7780	4.3 MEDIUM	Open5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of service
CVE-2026-7779	4.3 MEDIUM	Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscriptio
CVE-2025-70069		Assimp 资源管理错误漏洞
CVE-2025-70067		Assimp 安全漏洞
CVE-2025-70070		Assimp 代码问题漏洞
CVE-2025-70072		Assimp 缓冲区错误漏洞
CVE-2026-36365		caesium-image-compressor 命令注入漏洞
CVE-2026-38669		WCMS 跨站脚本漏洞
CVE-2026-37461		GoBGP 缓冲区错误漏洞
CVE-2026-37458		FRRouting 输入验证错误漏洞
CVE-2025-70071		Assimp 资源管理错误漏洞
CVE-2026-37459		FRRouting 资源管理错误漏洞
CVE-2025-67796		Rdiffweb 访问控制错误漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a