CVE-2025-54944

CriticalCVSS 9.8/10Last modified Oct 18, 2026

Description

An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write malicious code in a specific file, which may lead to arbitrary code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
SUNNET Technology Co., Ltd.	Corporate Training Management System	< 10.11

References

https://zuso.ai/advisory/za-2025-12

Timeline

Published: Aug 30, 2025
Last modified: Oct 18, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-549459.8An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers t CVE-2025-549469.8A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL c CVE-2025-549479.8In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability CVE-2025-549489.8A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious CVE-2025-549499.8A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec CVE-2025-54959.8A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the compon CVE-2025-549509.8An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec CVE-2025-549519.8A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result CVE-2025-549529.8An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potent CVE-2025-549558.1OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can le CVE-2025-549563.2The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the correspondin CVE-2025-549579.8An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is proces