Path Traversal Vulnerability in cemtan sar2html Affected Product by cemtan
CVE-2026-110666

6.9MEDIUM

Key Information:

Vendor

Cemtan

Status
Sar2html
Vendor
CVE Published:
14 October 2026

What is CVE-2026-110666?

A vulnerability exists in cemtan sar2html version 4.0.0 due to improper handling of the updateDb function in the sar2html.py file. This issue allows attackers to perform path traversal, potentially leading to unauthorized access to sensitive files on the server. Despite early notification from the community, there has been no response from the developers regarding a fix. Remote exploitation of this vulnerability is feasible, making it critical for users to be aware and take necessary precautions.

Affected Version(s)

sar2html 4.0.0

References

https://vuldb.com/vuln/419826
vdb-entrytechnical-description
https://vuldb.com/vuln/419826/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-110666
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

spoo1k (VulDB User)
VulDB CNA Team
.