Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112350— Sunhillo SureLine Path Traversal via radarUpdater.cgi

Quick assessment

Affected
Sunhillo Corporation SureLine
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Sunhillo SureLine 9.1.5 之前的版本在 端点中存在路径遍历漏洞。由于缺少身份验证检查且对文件名参数 sanitization（净化处理）不足，未认证的远程攻击者可利用该漏洞以 root 权限读取任意文件。攻击者可通过目录遍历序列访问敏感文件，例如 、Web 用户数据库、root 用户的 SSH 私钥以及设备的 TLS 私钥，从而导致系统被完全攻陷。

CVSS 7.5 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
Sunhillo Corporation SureLine 8.0.0< 9.1.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112350

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Sunhillo SureLine Path Traversal via radarUpdater.cgi
Source: CVE Program / CVE List V5
Vulnerability Description
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers can use directory traversal sequences to access sensitive files such as /etc/shadow, the web user database, the root SSH private key, and the device's TLS private key, leading to full system compromise.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Sunhillo Corporation SureLine 8.0.0 ~ 9.1.5 -

II. Public POCs for CVE-2026-112350

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112350

请登录查看更多情报信息。

Other References for CVE-2026-112350 (2)

Same Patch Batch · Sunhillo Corporation · 2026-10-27 · 3 CVEs total

CVE-2026-112352 9.1 CRITICAL Sunhillo SureLine Authentication Bypass via Session Cookie
CVE-2026-112351 8.8 HIGH Sunhillo SureLine OS Command Injection via networkDiag.cgi

IV. Related Vulnerabilities

Same product: SureLine
Same vendor: Sunhillo Corporation
Same weakness: CWE-22