Corporate Training Management System CVE-2026-24727

Q: What is the CVSS score of CVE-2026-24727?

CVE-2026-24727 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.7%.

EUVD-2026-48530 CRITICAL

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-07-24 ZUSO ART

GHSA-43fv-wgqf-rwjq

File Upload Corporate Training Management System

9.3

CVSS 4.0 · Vendor: ZUSO ART

Severity by source

Vendor (ZUSO ART) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.1 CRITICAL

Requires high privileges (admin) but no user interaction and network exploitable, leading to full system compromise.

3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

Primary rating from Vendor (ZUSO ART).

CVSS VectorVendor: ZUSO ART

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 11:54 vuln.today

CVE Published

Jul 24, 2026 - 08:29 cve.org

CRITICAL 9.3

DescriptionCVE.org

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.

AnalysisAI

Arbitrary command execution in SUNNET Corporate Training Management System through v10.3 allows authenticated administrators to upload a malicious ZIP archive via the e-paper draft upload function. Successful exploitation leads to full server compromise. No public exploit code or active exploitation is known, and EPSS indicates low exploitation probability.

Technical ContextAI

The vulnerability resides in the e-paper draft upload feature, which processes user-supplied ZIP archives. The application fails to validate the content type of extracted files, allowing a server-executable script (e.g., PHP or JSP) to be placed in a web-accessible directory. CWE-434 (Unrestricted Upload of File with Dangerous Type) captures the root cause: insufficient checks on the file's nature rather than its extension. The CPE identifier confirms SUNNET Technology Co., Ltd. as the vendor, and the affected component is part of the training management web application.

RemediationAI

No vendor-released patch has been identified at the time of analysis. Mitigations include disabling the e-paper draft upload feature entirely if not essential, restricting administrative access to strictly trusted personnel, and implementing server-side content inspection to block executable files within uploaded archives. Administrators should also consider configuring the web server to prevent direct execution of scripts in upload directories. These workarounds reduce risk but may impact functionality (e.g., disabling draft uploads) or require careful configuration to avoid breaking legitimate workflows.