CVE-2025-54943 — SUNNET Corporate Training Management System - Missing Authorization

CVE-2025-54943

SUNNET Corporate Training Management System - Missing Authorization PUBLISHED

Description (CNA)

A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application deployment due to the absence of proper access control checks.

Affected (CNA)

Vendor / product	Versions
SUNNET Technology Co., Ltd. / Corporate Training Management System	affected 0 before 10.11

CWE

CWE-862

References

https://zuso.ai/advisory/za-2025-11

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.