Read the docs

Sunnet

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Sunnet records in CISA KEV

No Sunnet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ehrd Ctms 16 records MEDIUM Wmpro 5 records MEDIUM Ehrd Cpas 1 record MEDIUM

Records

1 record in Ehrd Cpas · all components

TI-2026-06584 CVE-2026-7490 · GHSA-39xp-f2mc-9vx4

Sunnet｜CTMS and CPAS - Arbitrary File Upload

Priority MEDIUM 40

CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00465 Published 2026-05-02 No fix listed CWE-434
Open these records in search →