CVE-2024-7694

high · 7.2Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2026-02-17Remediation due 2026-03-10

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

7.2

CVSS

1.8%

EPSS (exploit prob.)

78th

EPSS percentile

2024-08-12

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Affected products

Vendor	Product	Affected versions
teamt5	threatsonar_anti-ransomware	< 3.5.0

Check a specific version with /api/v1/cve/match.

References

https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html
https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7694

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-7694