{"uuid": "6559fbf6-bed5-455b-8e5b-cc0b5d505fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69212", "type": "seen", "source": "https://t.me/cve0day/446", "content": "CVE-2025-69212\n\nOpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.", "creation_timestamp": "2026-08-27T15:00:05.991141Z"}