Home / Vulnerabilities / CVE-2024-7694
HIGH SEVERITY
CVE-2024-7694TeamT5 · ThreatSonar Anti-Ransomware

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

Technical Severity

CVSS v3.1 Metrics

HIGH
7.2 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitation Likelihood

EPSS Prediction

1.51 %
Predictive Probability
Percentile Rank
80.9 th

Documented as more likely to be exploited than 80.9% of known CVEs.

Detection Date

Feb 17, 2026

Remediation Due

Mar 10, 2026

CISA Catalog Active

Threat Analysis

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.

Remediation Directive

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/

https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/

https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html

https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2024-7694