CVE-2024-7694

7.2 highKEVEPSS 1.8%

High (7.2) in TeamT5 ThreatSonar Anti-Ransomware. In CISA KEV since 2026-02-17. EPSS 1.8% chance of exploitation in the next 30 days.

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2026-02-17, due 2026-03-10
CWE: CWE-434
Published: 2024-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teamt5:threatsonar_anti-ransomware

References

https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html
https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7694

Check your stack JSON