Teamt5 Threatsonar Anti-Ransomware vulnerabilities

CVE-2024-7694 [HIGH] CWE-434 CVE-2024-7694: ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Re ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

CVE-2026-5967 [HIGH] CWE-78 CVE-2026-5967: ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authentic ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attackers with shell access can inject OS commands and execute them with root privileges.

CVE-2026-5966 [HIGH] CWE-23 CVE-2026-5966: ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authen ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system.

CVE-2025-7145 [HIGH] CWE-78 CVE-2025-7145: ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host.

CVE-2025-4477 [HIGH] CWE-862 CVE-2025-4477: The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remot The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their privileges to highest administrator level through a specific API.