CVE-2026-24727 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive containing a server-executable file.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-434	Unrestricted Upload of File with Dangerous Type The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

참고 자료

https://zuso.ai/advisory