CVE-2024-7694

HighCVSS 7.2/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-76957.5Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, whichCVE-2024-76966.3Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamCVE-2024-76977.5Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.CVE-2024-76985.7A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.CVE-2024-76998.8An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user daCVE-2024-77006.5A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packages" field on the "ReCVE-2024-77017.5Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This isCVE-2024-77027.2The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPCVE-2024-77036.4The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to StoreCVE-2024-77047.5A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstoCVE-2024-77055.3A vulnerability was found in Fujian mwcms 1.0.0. It has been declared as critical. Affected by this vulnerability is the function uploadeditCVE-2024-77062.7A vulnerability was found in Fujian mwcms 1.0.0. It has been rated as critical. Affected by this issue is the function uploadimage of the fi