CVE-2025-54942 — SUNNET Corporate Training Management System - Missing Authentication for Critical Function

CVE-2025-54942

SUNNET Corporate Training Management System - Missing Authentication for Critical Function PUBLISHED

Description (CNA)

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Affected (CNA)

Vendor / product	Versions
SUNNET Technology Co., Ltd. / Corporate Training Management System	affected 0 before 10.11

CWE

CWE-306

References

https://zuso.ai/advisory/za-2025-10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.