Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Sunhillo Component: Sureline Clear all filters
TI-2026-81524 CVE-2026-112352 · GHSA-rvgw-426x-67hr

Authentication bypass in Sunhillo SureLine via forged session cookie

Priority MEDIUM 44

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01457 Published 2026-10-27 Fixed in 9.1.5 CWE-565
TI-2026-81519 CVE-2026-112351 · GHSA-x64r-r4gj-xh6q

OS command injection in Sunhillo SureLine via networkDiag.cgi

Priority MEDIUM 45

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by inj…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02683 Published 2026-10-27 Fixed in 9.1.5 CWE-78
TI-2026-81518 CVE-2026-112350 · GHSA-q7gg-whqr-w8f9

Path traversal in Sunhillo SureLine lets attackers read arbitrary files

Priority MEDIUM 45

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authenticat…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00949 Published 2026-10-27 Fixed in 9.1.5 CWE-22