SUNNET Technology Co., Ltd. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SUNNET Technology Co., Ltd. products: 1 record(s), with severity, exploitation and fixes.

Corporate Training Management System 1

Exploited only (KEV) →

CVE-2026-24727 Critical · 9.3 CWE-434 Jul 24, 2026

SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.