Vulnerability · Published Oct 27, 2026 · Assigned by VulnCheck

CVE-2026-112350Sunhillo SureLine Path Traversal via radarUpdater.cgi

High 7.5

In plain English

A high-severity path traversal in SureLine from Sunhillo Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.9%top 38.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers can use directory traversal sequences to access sensitive files such as /etc/shadow, the web user database, the root SSH private key, and the device's TLS private key, leading to full system compromise.

Affected products (as reported)

Vendor	Product	Versions
Sunhillo Corporation	SureLine	8.0.0 – before 9.1.5

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Product Webpage product
VulnCheck Advisory: Sunhillo SureLine Path Traversal via radarUpdater.cgi third-party-advisory