critical9.3
CVE-2026-24727
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v1…
Impact
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.
Affected products
| Product | Affected versions |
|---|---|
| SUNNET Corporate Training Management System | through 10.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.