Is CVE-2026-5967 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-5967 being exploited in the wild.

How severe is CVE-2026-5967?

High severity, with a CVSS score of 8.8, published 20 April 2026.

Which products and versions are affected?

TeamT5 ThreatSonar Anti-Ransomware versions before 4.0.0.

Is there a fix for CVE-2026-5967?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-5967 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-5967?

Check whether you run TeamT5 ThreatSonar Anti-Ransomware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-5967: TeamT5 ThreatSonar Anti-Ransomware privilege escalation via OS command injection

CVE-2026-5967 · Severity: high · CVSS 8.8 · Published 2026-04-20

TeamT5 ThreatSonar Anti-Ransomware, a security solution designed to protect organizations from ransomware attacks, contains a vulnerability that allows an authorized user to gain full control over the system. An attacker who already has basic access to the system's command-line interface can exploit this flaw to execute commands with the highest level of administrative (root) privileges. This could lead to a complete compromise of the security appliance, allowing the attacker to disable protections, access sensitive data, or disrupt business operations.

Technologies: TeamT5 ThreatSonar Anti-Ransomware. Vendors: TeamT5.

Quick answers

Is CVE-2026-5967 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-5967 being exploited in the wild.
How severe is CVE-2026-5967?: High severity, with a CVSS score of 8.8, published 20 April 2026.
Which products and versions are affected?: TeamT5 ThreatSonar Anti-Ransomware versions before 4.0.0.
Is there a fix for CVE-2026-5967?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-5967 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-5967?: Check whether you run TeamT5 ThreatSonar Anti-Ransomware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability (CWE-78) exists in TeamT5 ThreatSonar Anti-Ransomware versions prior to 4.0.0. The flaw allows an authenticated remote attacker who already possesses shell access to inject and execute arbitrary commands. Because the vulnerable component executes these commands with elevated permissions, the attacker can achieve full root-level access on the underlying operating system. This vulnerability is addressed in version 4.0.0 and hotpatch version 20260302.

Affected products

TeamT5 ThreatSonar Anti-Ransomware versions before 4.0.0

Timeline

2026-04-20: disclosed
2026-04-20: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.