CVE-2025-54942 CRITICAL

CVE-2025-54942: SUNNET Corporate Training Management System - Missing Authentication for Critical Function

Vendor Sunnet Technology Co., Ltd.
Product Corporate Training Management System
Weakness CWE-306 · Missing auth
Published August 30, 2025
Last update January 30, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication.

Key dates

02Disclosure timeline

August 30, 2025 CVE published
January 30, 2026 Record updated