Vulnerabilidades de Sunhillo Corporation (CVE)

Registros CVE publicados para Sunhillo Corporation, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
9.1Crítica
CVE-2026-112352

Sunhillo SureLine Authentication Bypass via Session Cookie

Sunhillo Corporation SureLine

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random id…

1.5%EPSS
8.8Alta
CVE-2026-112351

Sunhillo SureLine OS Command Injection via networkDiag.cgi

Sunhillo Corporation SureLine

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ip…

2.7%EPSS
7.5Alta
CVE-2026-112350

Sunhillo SureLine Path Traversal via radarUpdater.cgi

Sunhillo Corporation SureLine

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitizatio…