CVE entry · CVE-2024-7694
CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.
- Actively exploited: added to CISA’s KEV catalog on February 17, 2026.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: March 10, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes TeamT5 ThreatSonar Anti-Ransomware, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (teamt5.org)
- Vendor advisory or reference cited by CISA (www.twcert.org.tw)
- NVD entry (NIST)
- CISA KEV catalog