Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Sunshine — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Sunshine, with AI-generated Chinese analysis, references, and POCs.

Vendor: LizardByte

CVE IDTitleCVSSSeverityPublished
CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution CWE-428 6.7 Medium2025-09-23
CVE-2025-53095 Sunshine application-wide CSRF in the UI leads to command injection as Administrator CWE-352 9.7 Critical2025-07-01
CVE-2025-53096 Sunshine clickjacking in the UI leads to unauthorized actions being performed CWE-1021 5.4 Medium2025-07-01
CVE-2024-51738 Sunshine improperly enforces pairing protocol request order CWE-305 5.9 -2025-01-20
CVE-2024-45407 Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client CWE-300 6.5 Medium2024-09-10
CVE-2024-31226 Sunshine's unquoted executable path could lead to hijacked execution flow CWE-428 4.9 Medium2024-05-16
CVE-2024-31221 Clients removed during unpairing process may regain access if Sunshine was not restarted CWE-384 5.9 Medium2024-04-08
CVE-2024-31220 Sunshine vulnerable to remote unauthenticated arbitrary file read CWE-22 7.3 High2024-04-05

All 8 known CVE vulnerabilities affecting Sunshine with full Chinese analysis, references, and POCs where available.