CVE-2026-5967

CVE-2026-5967 is a privilege escalation vulnerability in TeamT5's ThreatSonar Anti-Ransomware product that allows authenticated remote attackers with shell access to inject arbitrary operating system commands and execute them with root-level privileges. This vulnerability affects the core functionality of a security tool designed to protect against ransomware threats. The attack requires network access and valid authentication credentials but no user interaction, resulting in a CVSS 3.1 score of 8.8 (HIGH) with complete compromise of confidentiality, integrity, and availability. Exploitation status indicates this vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hot lists, suggesting limited active exploitation in the wild. However, the FAUCET Risk Score of 52.0/100 indicates moderate concern, and organizations running ThreatSonar should prioritize patching given the severe impact potential if an authenticated attacker gains system access.