CVE-2026-110668
HighCVSS 7.3Summary
In cemtan sar2html 4.0.0, the index function in sar2html.py does not properly sanitize the sort argument, leading to SQL injection. The attack can be carried out remotely, and a public exploit is available that could be used in attacks. The project was informed of the issue but has not responded.
Risk Assessment
A remote attacker could exploit the SQL injection to read or modify database data, potentially leading to information disclosure or data integrity loss.
Recommendation
Restrict access to sar2html to trusted networks, consider applying your own fixes, or replace the tool, as the project has not responded to the report.
Other vulnerabilities in sar2html
See all- CVE-2026-110670High
A SQL injection vulnerability was found in cemtan sar2html 4.0.0, in the updateDb function of sar2html.py within the Archive Processing component. Manipulation of the s2host argument allows SQL injection. The attack can be launched remotely.
- CVE-2026-110667High
A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
- CVE-2026-18719Medium
A vulnerability in sar2html 4.0.0 affects an unknown part of the file sar2html.py in the Search component. Manipulating the Search argument results in SQL injection. The attack can be initiated remotely, and the exploit is now public.
Original NVD description (English source)
A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS