CVE-2024-7694

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/ ; https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-7694

Remediation deadline: March 10, 2026

Description

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.

Timeline

Published:February 17th, 2026 12:00 AM

Last modified:February 17th, 2026 12:00 AM

Added to KEV:February 17th, 2026

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

TeamT5

Products

ThreatSonar Anti-Ransomware

Weaknesses (CWE)

CWE-434

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute