CVE-2026-5966

CVE-2026-5966 is an Arbitrary File Deletion vulnerability in ThreatSonar Anti-Ransomware, developed by TeamT5, that allows authenticated remote attackers to delete arbitrary files through Path Traversal exploitation. The vulnerability requires valid web access credentials but can be executed with minimal user interaction, posing a significant integrity and availability risk. The attack has a high CVSS score of 8.1, with a network-based attack vector and low complexity, indicating attackers can exploit this remotely without specialized knowledge. There is currently no evidence of active exploitation in the wild, as indicated by the absence from CISA's Known Exploited Vulnerabilities catalog and its inactive status on threat tracking lists. Community attention remains low relative to other vulnerabilities, with an EPSS score indicating this threat is less prevalent than the majority of published CVEs, though organizations running ThreatSonar should prioritize patching due to the severity of potential impact.