Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-54942 EUVD-2025-26259GHSA-rw77-76p7-66x5

SUNNET Corporate Training Management System - Missing Authentication for Critical Function

Published Aug 30, 2025 · Updated Jan 30, 2026 · Assigned by ZUSO ART

Vendor: Sunnet Product: Corporate Training Management System

Description

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Affected products

VendorProductAffectedFixed
SUNNET Technology Corporate Training Management System < 10.11 10.11

References