CVE-2025-69212 - OpenSTAManager has an OS Command Injection in P7M File Processing

CVE ID : CVE-2025-69212 Published : Feb. 6, 2026, 6:12 p.m. | 30 minutes ago Description : OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...