--- title: Il blog di tecnologia e servizi IT description: Digital Infrastructure e Digital Workplace come evolvono e come evolversi per essere competitivi. La voce dei tecnici e dei business developer Elmec su IT Operations e Strategies --- [![logo](https://www.elmec.com/assets/imgs/logo-light.svg)](https://www.elmec.com) - [Competenze](https://www.elmec.com/competenze/index.html) - [Non eventi](https://www.elmec.com/eventi-formativi/index.html) - [Vita in azienda](https://www.elmec.com/vita-in-azienda/index.html) - [Burocrazia](https://www.elmec.com/burocrazia/index.html) - [Blog](https://blog.elmec.com/) - [Contatti](https://www.elmec.com/contatti/index.html) - SOS Security - [MyElmec](https://my.elmec.com/) [![](https://www.elmec.com/assets/imgs/logo-light.svg)](https://www.elmec.com) ## Menu - [Competenze](https://www.elmec.com/competenze/index.html) - [Non Eventi](https://www.elmec.com/eventi-formativi/index.html) - [Vita in azienda](https://www.elmec.com/vita-in-azienda/index.html) - [Burocrazia](https://www.elmec.com/burocrazia/index.html) - [Blog](https://blog.elmec.com/) - [Contatti](https://www.elmec.com/contatti/index.html) ###### Vieni a trovarci ##### Via Pret, 1 - Brunello (VA) - a pochi KM da Milano ###### Social Media - [LinkedIn](https://www.linkedin.com/company/elmec-informatica/) - [Instagram](https://www.instagram.com/elmecinformatica/) - [Facebook](https://www.facebook.com/ElmecInformatica/) ###### Contattaci ##### [0332.802.111](tel:+390332802111) [![Il tuo ufficio è smart. I tuoi strumenti lo sono abbastanza?](https://blog.elmec.com/hubfs/blog%20workplace.png)](https://blog.elmec.com/il-tuo-ufficio-%C3%A8-smart-i-tuoi-strumenti-lo-sono-abbastanza?hsLang=it-it) **ago** 24 - Scritto da **[Ivana Basaric](https://blog.elmec.com/author/ivana-basaric?hsLang=it-it)** ### [Il tuo ufficio è smart. I tuoi strumenti lo sono abbastanza?](https://blog.elmec.com/il-tuo-ufficio-%C3%A8-smart-i-tuoi-strumenti-lo-sono-abbastanza?hsLang=it-it) *I numeri parlano chiaro: i dipendenti vengono interrotti da problemi tecnologici in media 3,6 volte al mese, interruzioni che portano via almeno 15 minuti ogni volta. Moltiplicate per tutto il team, per tutti i mesi dell'anno, capirete perché il CFO ha quella faccia.* [Leggi di più](https://blog.elmec.com/il-tuo-ufficio-%C3%A8-smart-i-tuoi-strumenti-lo-sono-abbastanza?hsLang=it-it) [![Dalla chat al server: la catena di attacco che nessun check di sicurezza avrebbe fermato](https://blog.elmec.com/hubfs/blog%20pen%20test.png)](https://blog.elmec.com/dalla-chat-al-server-la-catena-di-attacco-che-nessun-check-di-sicurezza-avrebbe-fermato?hsLang=it-it) **lug** 31 - Scritto da **[Paolo Ferro](https://blog.elmec.com/author/paolo-ferro?hsLang=it-it)** ### [Dalla chat al server: la catena di attacco che nessun check di sicurezza avrebbe fermato](https://blog.elmec.com/dalla-chat-al-server-la-catena-di-attacco-che-nessun-check-di-sicurezza-avrebbe-fermato?hsLang=it-it) *In un mondo digitale in cui ogni nuovo servizio online allarga la superficie di attacco, i Penetration Test non sono più solo un “check di sicurezza”, ma uno strumento essenziale per capire quanto le nostre infrastrutture reggano davvero sotto pressione.* [Leggi di più](https://blog.elmec.com/dalla-chat-al-server-la-catena-di-attacco-che-nessun-check-di-sicurezza-avrebbe-fermato?hsLang=it-it) [![CVE-2026-51367: Insecure Direct Object Reference (IDOR) Leading to Unauthorized Data Access](https://blog.elmec.com/hubfs/CVE-2026-51367.png)](https://blog.elmec.com/cve-2026-51367-insecure-direct-object-reference-idor-leading-to-unauthorized-data-access?hsLang=it-it) **lug** 30 - Scritto da **[Andrea Ferrario](https://blog.elmec.com/author/andrea-ferrario?hsLang=it-it)** ### [CVE-2026-51367: Insecure Direct Object Reference (IDOR) Leading to Unauthorized Data Access](https://blog.elmec.com/cve-2026-51367-insecure-direct-object-reference-idor-leading-to-unauthorized-data-access?hsLang=it-it) ### Summary | Field | Value | | --- | --- | | **CVE ID** | CVE-2026-51367 | | **Product** | Vedo Suite (Bottinelli Informatica) | | **Affected Version(s)** | v1.2.5 | | **Vulnerability Class** | CWE-639: Authorization Bypass Through User-Controlled Key | | **Attack Vector** | Network (HTTP API) | | **Privileges Required** | Low (authenticated application user) | | **User Interaction** | None | | **Impact** | Confidentiality breach / unauthorized access to other users’ data | | **Estimated CVSS 3.1** | 8.7 (High) — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | [Leggi di più](https://blog.elmec.com/cve-2026-51367-insecure-direct-object-reference-idor-leading-to-unauthorized-data-access?hsLang=it-it) [![CVE-2026-51366: SQL Injection Leading to Remote Code Execution](https://blog.elmec.com/hubfs/CVE-2026-51366.png)](https://blog.elmec.com/cve-2026-51366-sql-injection-leading-to-remote-code-execution?hsLang=it-it) **lug** 30 - Scritto da **[Andrea Ferrario](https://blog.elmec.com/author/andrea-ferrario?hsLang=it-it)** ### [CVE-2026-51366: SQL Injection Leading to Remote Code Execution](https://blog.elmec.com/cve-2026-51366-sql-injection-leading-to-remote-code-execution?hsLang=it-it) ### Summary | Field | Value | | --- | --- | | **CVE ID** | CVE-2026-51366 | | **Product** | Vedo Suite (Bottinelli Informatica) | | **Affected Version(s)** | v1.2.5 (and possibly earlier/other versions using the same endpoint logic — unconfirmed) | | **Vulnerability Class** | CWE-89: SQL Injection | | **Secondary Impact** | CWE-78: OS Command Injection (via xp\_cmdshell) | | **Attack Vector** | Network (HTTP GET) | | **Privileges Required** | Low (authenticated application user) | | **User Interaction** | None | | **Backend** | Microsoft SQL Server | | **Estimated CVSS 3.1** | 9.9 (Critical) — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | [Leggi di più](https://blog.elmec.com/cve-2026-51366-sql-injection-leading-to-remote-code-execution?hsLang=it-it) [![Difesa Cibernetica Europea: il ruolo della normativa NIS2](https://blog.elmec.com/hubfs/grafiche%20blog-2.png)](https://blog.elmec.com/difesa-cibernetica-europea-il-ruolo-della-normativa-nis2?hsLang=it-it) **lug** 21 - Scritto da **[Filadelfio Emanuele](https://blog.elmec.com/author/filadelfio-emanuele?hsLang=it-it)** ### [Difesa Cibernetica Europea: il ruolo della normativa NIS2](https://blog.elmec.com/difesa-cibernetica-europea-il-ruolo-della-normativa-nis2?hsLang=it-it) *La NIS2 è ufficialmente diventata operativa e impone alle aziende dei settori critici degli obblighi specifici per innalzare il loro livello di sicurezza. In questo articolo riassumiamo le principali linee guida tecniche e organizzative che le imprese sono tenute a seguire.* [Leggi di più](https://blog.elmec.com/difesa-cibernetica-europea-il-ruolo-della-normativa-nis2?hsLang=it-it) - [Tutti i post](https://blog.elmec.com/all?hsLang=it-it) - [» Avanti](https://blog.elmec.com/page/2?hsLang=it-it) - [Italiano - Italia](https://blog.elmec.com) - [Inglese](https://blog.elmec.com/en) ## Ultimi post pubblicati ### Tags - [50annidiElmec (4)](https://blog.elmec.com/tag/50annidielmec?hsLang=it-it) - [About (3)](https://blog.elmec.com/tag/about?hsLang=it-it) - [AI (3)](https://blog.elmec.com/tag/ai?hsLang=it-it) - [as400 (3)](https://blog.elmec.com/tag/as400?hsLang=it-it) - [ASSET MANAGEMENT (6)](https://blog.elmec.com/tag/asset-management?hsLang=it-it) - [automation (3)](https://blog.elmec.com/tag/automation?hsLang=it-it) - [award (3)](https://blog.elmec.com/tag/award?hsLang=it-it) - [backup (6)](https://blog.elmec.com/tag/backup?hsLang=it-it) - [business continuity (1)](https://blog.elmec.com/tag/business-continuity?hsLang=it-it) - [career (6)](https://blog.elmec.com/tag/career?hsLang=it-it) - [cloud (8)](https://blog.elmec.com/tag/cloud?hsLang=it-it) - [CMDB (3)](https://blog.elmec.com/tag/cmdb?hsLang=it-it) - [competenze (1)](https://blog.elmec.com/tag/competenze?hsLang=it-it) - [comunicato (4)](https://blog.elmec.com/tag/comunicato?hsLang=it-it) - [connect (2)](https://blog.elmec.com/tag/connect?hsLang=it-it) - [connettività (1)](https://blog.elmec.com/tag/connettivit%C3%A0?hsLang=it-it) - [container (1)](https://blog.elmec.com/tag/container?hsLang=it-it) - [CSR (13)](https://blog.elmec.com/tag/csr?hsLang=it-it) - [cybersecurity (17)](https://blog.elmec.com/tag/cybersecurity?hsLang=it-it) - [data center (9)](https://blog.elmec.com/tag/data-center?hsLang=it-it) - [data management (5)](https://blog.elmec.com/tag/data-management?hsLang=it-it) - [data protection (5)](https://blog.elmec.com/tag/data-protection?hsLang=it-it) - [data security (4)](https://blog.elmec.com/tag/data-security?hsLang=it-it) - [device as a service (10)](https://blog.elmec.com/tag/device-as-a-service?hsLang=it-it) - [devops (4)](https://blog.elmec.com/tag/devops?hsLang=it-it) - [dex (1)](https://blog.elmec.com/tag/dex?hsLang=it-it) - [digital employee esperience (3)](https://blog.elmec.com/tag/digital-employee-esperience?hsLang=it-it) - [digital infrastructure (12)](https://blog.elmec.com/tag/digital-infrastructure?hsLang=it-it) - [digital workplace (15)](https://blog.elmec.com/tag/digital-workplace?hsLang=it-it) - [disaster recovery (4)](https://blog.elmec.com/tag/disaster-recovery?hsLang=it-it) - [elmec (18)](https://blog.elmec.com/tag/elmec?hsLang=it-it) - [Elmec Vision (3)](https://blog.elmec.com/tag/elmec-vision?hsLang=it-it) - [events (7)](https://blog.elmec.com/tag/events?hsLang=it-it) - [formazione (2)](https://blog.elmec.com/tag/formazione?hsLang=it-it) - [governance (3)](https://blog.elmec.com/tag/governance?hsLang=it-it) - [help desk (1)](https://blog.elmec.com/tag/help-desk?hsLang=it-it) - [HR (9)](https://blog.elmec.com/tag/hr?hsLang=it-it) - [hybrid cloud (2)](https://blog.elmec.com/tag/hybrid-cloud?hsLang=it-it) - [ibm (1)](https://blog.elmec.com/tag/ibm?hsLang=it-it) - [Infrastructure IT (17)](https://blog.elmec.com/tag/infrastructure-it?hsLang=it-it) - [IoT (1)](https://blog.elmec.com/tag/iot?hsLang=it-it) - [IT operation (3)](https://blog.elmec.com/tag/it-operation?hsLang=it-it) - [macchine virtuali (1)](https://blog.elmec.com/tag/macchine-virtuali?hsLang=it-it) - [managed Licensing Service (1)](https://blog.elmec.com/tag/managed-licensing-service?hsLang=it-it) - [Managed Workplace (15)](https://blog.elmec.com/tag/managed-workplace?hsLang=it-it) - [myelmec (21)](https://blog.elmec.com/tag/myelmec?hsLang=it-it) - [network (5)](https://blog.elmec.com/tag/network?hsLang=it-it) - [news (12)](https://blog.elmec.com/tag/news?hsLang=it-it) - [noleggio (7)](https://blog.elmec.com/tag/noleggio?hsLang=it-it) - [noleggio operativo (2)](https://blog.elmec.com/tag/noleggio-operativo?hsLang=it-it) - [patch (2)](https://blog.elmec.com/tag/patch?hsLang=it-it) - [patch management (2)](https://blog.elmec.com/tag/patch-management?hsLang=it-it) - [Platform Services (5)](https://blog.elmec.com/tag/platform-services?hsLang=it-it) - [postazioni di lavoro (2)](https://blog.elmec.com/tag/postazioni-di-lavoro?hsLang=it-it) - [press release (1)](https://blog.elmec.com/tag/press-release?hsLang=it-it) - [SAP (2)](https://blog.elmec.com/tag/sap?hsLang=it-it) - [sase (1)](https://blog.elmec.com/tag/sase?hsLang=it-it) - [sdwan (1)](https://blog.elmec.com/tag/sdwan?hsLang=it-it) - [security (6)](https://blog.elmec.com/tag/security?hsLang=it-it) - [servizi gestiti (17)](https://blog.elmec.com/tag/servizi-gestiti?hsLang=it-it) - [sistemi informatici (1)](https://blog.elmec.com/tag/sistemi-informatici?hsLang=it-it) - [Sostenibilità (12)](https://blog.elmec.com/tag/sostenibilit%C3%A0?hsLang=it-it) - [Sponsored Blog Post (5)](https://blog.elmec.com/tag/sponsored-blog-post?hsLang=it-it) - [Storage (5)](https://blog.elmec.com/tag/storage?hsLang=it-it) - [ticketing (1)](https://blog.elmec.com/tag/ticketing?hsLang=it-it) - [virtual machine (1)](https://blog.elmec.com/tag/virtual-machine?hsLang=it-it) - [vpn (1)](https://blog.elmec.com/tag/vpn?hsLang=it-it) - [workplace (9)](https://blog.elmec.com/tag/workplace?hsLang=it-it) - [ztna (1)](https://blog.elmec.com/tag/ztna?hsLang=it-it) ![](https://www.elmec.com/assets/imgs/logo-light.svg) - [LinkedIn](https://www.linkedin.com/company/elmec-informatica/) - [Instagram](https://www.instagram.com/elmecinformatica/) - [Facebook](https://www.facebook.com/ElmecInformatica/) ## Come possiamo aiutarti? [Contattaci.](https://www.elmec.com/contatti/index.html) [+39 0332.802.111](tel:+390332802111) [Note legali](https://www.elmec.com/note-legali/index.html) [Assistenza tecnica](https://www.elmec.com/assistenza-tecnica/index.html) ###### Chi siamo Non possiamo parlare di futuro senza raccontarti le origini. Era il 1971 quando tutto ebbe inizio. Una storia lunga quanto quella dell’informatica: c’era la perforatrice e c’eravamo noi. [Guarda come siamo diventati grandi.](https://www.elmec.com/storia/index.html) [Lavora con noi](https://www.elmec.com/lavora-con-noi/index.html) [Privacy Policy](https://www.iubenda.com/privacy-policy/48401532) | [Cookies Policy](https://www.iubenda.com/privacy-policy/48401532/cookie-policy) | [Informativa privacy clienti e fornitori](https://www.elmec.com/privacy/Informativa-clienti-e-fornitori-sito-GDPR.pdf) Elmec Informatica S.p.A. © 2024 - [Tutti i diritti sono riservati](https://www.elmec.com/privacy/Disclaimer-Copyright.pdf)