VULNERABILITY INTELLIGENCE
CVE-2026-24727
EPSS probability0.65%
CISA KEVNot currently listed
Published2026-07-24
Last modified2026-10-24
Description
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.
Weakness classification
- ART@zuso.ai: CWE-434