Read the docs

Sunhillo

Records4All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Sunhillo records in CISA KEV
TI-2021-14731 Sunhillo SureLine OS Command Injection Vulnerablity Priority CRITICAL 100KEV 2024-03-05

Components

Products in the NVD configurations · select one to filter the records
Sureline 4 records CRITICAL

Records

4 records

TI-2026-81519 CVE-2026-112351 · GHSA-x64r-r4gj-xh6q

OS command injection in Sunhillo SureLine via networkDiag.cgi

Priority MEDIUM 45

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by inj…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02683 Published 2026-10-27 Fixed in 9.1.5 CWE-78
TI-2026-81518 CVE-2026-112350 · GHSA-q7gg-whqr-w8f9

Path traversal in Sunhillo SureLine lets attackers read arbitrary files

Priority MEDIUM 45

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authenticat…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00949 Published 2026-10-27 Fixed in 9.1.5 CWE-22
TI-2026-81524 CVE-2026-112352 · GHSA-rvgw-426x-67hr

Authentication bypass in Sunhillo SureLine via forged session cookie

Priority MEDIUM 44

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01457 Published 2026-10-27 Fixed in 9.1.5 CWE-565
Open these records in search →