TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability.

TeamT5 · ThreatSonar Anti-Ransomware

Exploitabilité (EPSS)

1.8 %

percentile mondial 76

Sévérité (CVSS)

7.2

CVSS v3.1

Ajoutée au KEV

17 févr. 2026

échéance CISA · 10 mars 2026

Description

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.

Action requise (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Familles de faiblesses

CWE-434 · Téléversement de fichier non restreint

Signal de priorisation (inspiré SSVC)

Examiner

Exploitation
Active (catalogue KEV)

Automatisable
Inconnu

Impact technique
Partiel

Orientation, pas une décision : le 4ᵉ facteur SSVC (impact mission/société) dépend du contexte de votre organisation. Méthode ↗

NVD ↗ CVE.org ↗ CISA KEV ↗