CVE-2026-5966
Received Received - Intake
Path Traversal in ThreatSonar Anti-Ransomware Enables File Deletion

Publication date: 2026-04-20

Last updated on: 2026-04-20

Assigner: TWCERT/CC

Description
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-20
Last Modified
2026-04-20
Generated
2026-06-16
AI Q&A
2026-04-20
EPSS Evaluated
2026-06-15
NVD
CVE-2026-5966
EUVD
EUVD-2026-23799
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
teamt5 threatsonar_anti-ransomware *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-23 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in ThreatSonar Anti-Ransomware developed by TeamT5. It is an Arbitrary File Deletion vulnerability caused by a Path Traversal issue. Authenticated remote attackers who have web access can exploit this flaw to delete arbitrary files on the affected system.

Impact Analysis

Exploitation of this vulnerability allows an attacker with authenticated web access to delete arbitrary files on the system. This can lead to loss of critical data, disruption of system operations, and potential compromise of system integrity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-5966. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart