p PatchFirst

CVE-2026-110667

CVE-2026-110667 · cemtan sar2html sar2html.py hard-coded credentials

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 6.9 · Medium · EPSS 0.3%

Published
Updated

Affected products and versions

  • sar2html

    Versions
    • 4.0.0: Affected

    No fix published

Original sources

Check your server →