CVE-2026-24727
CriticalCVSS 9.3Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.
Risk Assessment
Administrators can be tricked into uploading a malicious file, leading to remote code execution on the server and full compromise of the training management system.
Recommendation
Upgrade SUNNET Corporate Training Management System to a version later than v10.3 and implement file type validation and archive scanning mechanisms.
Other vulnerabilities in SUNNET Corporate Training Management System
See all- CVE-2025-54946Critical
A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
- CVE-2025-54945Critical
An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary system commands via a malicious file by controlling the destination file path.
- CVE-2025-54944Critical
SUNNET Corporate Training Management System before 10.11 has an unrestricted upload of file with dangerous type vulnerability, allowing remote attackers to write malicious code in a specific file, potentially leading to arbitrary code execution.
- CVE-2025-54943Critical
A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.
- CVE-2025-54942Critical
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.
Original NVD description (English source)
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS