CVE-2026-24727

The SUNNET Corporate Training Management System's e-paper draft upload function is vulnerable to unrestricted file uploads, allowing remote authenticated users with administrator privileges to upload a malicious ZIP archive containing executable files. This vulnerability could lead to arbitrary command execution on the server, posing a significant risk to system integrity and data security. Organizations using this system, especially those with administrative access, should prioritize patching this vulnerability to mitigate potential exploitation.