Arbitrary file upload in Sunnet Technology Co., Ltd. Corporate Training Management System
CVE-2026-24727
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute a…
Vulnerability class: Unrestricted File Upload
Affected products
Weakness classification (CWE)
References
- ART@zuso.ai (third-party-advisory)