Summary
TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.
- Vendor
- TeamT5
- Product
- ThreatSonar Anti-Ransomware
- Added to KEV
- Feb 17, 2026
- Remediation due
- Mar 10, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-434
- EPSS
- 1.8% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References