PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-7694 TeamT5 CVE debrief

CVE-2024-7694 is a file-upload weakness in TeamT5 ThreatSonar Anti-Ransomware described by the source corpus as an unrestricted upload of a file with a dangerous type. CISA added the issue to the Known Exploited Vulnerabilities catalog on 2026-02-17, so defenders should treat it as an active-risk issue even though the supplied corpus does not include a CVSS score, impact rating, or detailed exploitation method.

Vendor
TeamT5
Product
ThreatSonar Anti-Ransomware
CVSS
HIGH 7.2
CISA KEV
Listed
Original CVE published
2026-02-17
Original CVE updated
2026-02-17
Advisory published
2026-02-17
Advisory updated
2026-02-17

Who should care

Security teams operating TeamT5 ThreatSonar Anti-Ransomware, especially administrators responsible for patching, hardening, and service continuity. Asset owners should also care because CISA’s KEV listing indicates the vulnerability has been exploited in the wild.

Technical summary

The supplied sources identify the flaw as an unrestricted upload of a file with a dangerous type in TeamT5 ThreatSonar Anti-Ransomware. The corpus does not provide exploit steps, affected versions, or a severity score, so the safest interpretation is that the product does not sufficiently constrain upload type handling. Because CISA lists the CVE in KEV, prioritize remediation and verify whether vendor-provided mitigations are available.

Defensive priority

High. This CVE is in CISA’s Known Exploited Vulnerabilities catalog, which means it should be prioritized ahead of non-KEV issues. The KEV metadata sets a due date of 2026-03-10 for applying mitigations or discontinuing use if mitigations are unavailable.

Recommended defensive actions

  • Apply mitigations per TeamT5 vendor instructions as referenced by CISA.
  • If mitigations are unavailable or cannot be applied promptly, discontinue use of the product in accordance with CISA guidance.
  • Review exposed upload functionality and restrict accepted file types as tightly as operationally possible.
  • Confirm whether the affected product instance is present in your environment and track remediation to the KEV due date of 2026-03-10.
  • Monitor the official CVE and NVD records for updates to affected scope, severity, or remediation details.

Evidence notes

The source corpus names the issue as "TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability" and marks it as a KEV entry. The KEV metadata states required action as applying vendor mitigations or discontinuing use if mitigations are unavailable, with knownRansomwareCampaignUse listed as Unknown. No CVSS score or severity value was supplied in the provided corpus.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-7694 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-7694

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-7694 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-7694

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

    cisa_kev

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.