CVE-2026-110670

CVE-2026-110670 · cemtan sar2html Archive Processing sar2html.py updateDb sql injection

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 6.9 · Moyenne · EPSS 0,3%

Publication: 2026-10-14T20:15:15.237Z
Mise à jour: 2026-10-15T15:05:11.401Z

Produits et versions concernés

sar2html
Versions du logiciel
- 4.0.0: Concernée
Aucun correctif publié

Sources originales

https://vuldb.com/vuln/419833
https://vuldb.com/vuln/419833/cti
https://vuldb.com/cve/CVE-2026-110670
https://vuldb.com/submit/1003778
https://github.com/cemtan/sar2html/issues/22
https://github.com/cemtan/sar2html/
https://nvd.nist.gov/vuln/detail/CVE-2026-110670

Vérifiez votre serveur →