CVE-2025-54946 CRITICAL

CVE-2025-54946: SUNNET Corporate Training Management System - SQL Injection

Vendor Sunnet Technology Co., Ltd.
Product Corporate Training Management System
Weakness CWE-89 · SQLi
Published August 30, 2025
Last update January 30, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.

Key dates

02Disclosure timeline

August 30, 2025 CVE published
January 30, 2026 Record updated