CVE-2026-112352

Summary

Sunhillo SureLine before 9.1.5 has a critical authentication bypass flaw where unauthenticated attackers can forge session cookies containing only a cleartext username, enabling them to impersonate any active user—including privileged accounts like Admin or sftp_user—and gain unauthorized access to sensitive functions.

Exploitability

Exploitation is straightforward for attackers: they only need to guess common default usernames and send a forged cookie without randomness or integrity checks; no prior access or user interaction is required.

Blast radius

Successful exploitation allows full compromise of confidentiality and integrity via root-level command execution through chained endpoints like networkDiag.cgi, potentially affecting all devices running the vulnerable firmware.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Sunhillo SureLine version 9.1.5 or later, which includes proper session cookie generation with random identifiers and cryptographic integrity protection.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.