{"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"}