Risk Letters

Exploited vulnerability

CVE-2024-7694

TLP:CLEAR

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.

Facts

  • Vendor: TeamT5
  • Product: ThreatSonar Anti-Ransomware
  • CVSS: 7.2
  • EPSS (probability of exploitation within 30 days): 1.8 %
  • On CISA's Known Exploited Vulnerabilities list since: 17 February 2026
  • First known exploitation: 17 February 2026
  • CISA's deadline for US federal agencies: 10 March 2026
  • Weakness: CWE-434
  • First seen by Risk Letters: 17 February 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD