CVE-2024-7694highunder attackCWE-434

CVE-2024-7694: high-severity vulnerability in TeamT5 ThreatSonar Anti-Ransomware

TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload

Published · Updated

Follow this CVE+ Monitor ThreatSonar Anti-Ransomware

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.2epss 1.8%
from disclosure to weapon
Published on NVDAug 12
CISA KEV+554d
Action required by CISAfederal deadline: 2026-03-10

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

TeamT5's ThreatSonar Anti-Ransomware fails to properly check uploaded files, allowing administrators to upload malicious files that execute harmful commands on the server.

Technical detail

The application lacks adequate file content validation on upload endpoints. An authenticated attacker with administrator privileges can bypass file restrictions to upload executable payloads, leading to remote code execution (RCE) on the host system.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
TeamT5 · ThreatSonar Anti-Ransomware
Related CVEs — TeamT5 ThreatSonar Anti-Ransomware

In the same product, most dangerous first.

CVE-2025-7145HIGHTeamT5｜ThreatSonar Anti-Ransomware - OS Command InjectionEPSS 1.0%CVE-2025-4477HIGHTeamT5 ThreatSonar Anti-Ransomware - Privilege EscalationEPSS 0.5%CVE-2026-5966HIGHTeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File DeletionEPSS 0.4%CVE-2026-5967HIGHTeamT5｜ThreatSonar Anti-Ransomware - Privilege EscalationEPSS 0.4%