Live › vulnerability › CVE-2026-112350
Go to dashboardSunhillo SureLine before 9.1.5 has a path traversal flaw in the radarUpdater.cgi endpoint. An unauthenticated remote attacker can read arbitrary files as root, including /etc/shadow, the web user database, the root SSH private key and the TLS private key.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 20:33 UTC. All times on this page are UTC.
Any SureLine deployment before 9.1.5 where the radarUpdater.cgi endpoint is reachable is exposed, since the flaw needs no login. The sources do not say which network placements or configurations are most at risk, so treat any internet-reachable or broadly internal instance as exposed. Installations already on 9.1.5 or later are not affected by this flaw.
No product ranges from the sources yet.
9.1.5 in the admin interface or product documentation9.1.5 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers can use directory traversal sequences to access sensitive files such as /etc/shadow, the web user database, the root SSH private key, and the device's TLS private key, leading to full system compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-112350")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.