SQL Injection Vulnerability in cemtan sar2html 4.0.0 by cemtan

CVE-2026-18719

What is CVE-2026-18719?

A vulnerability exists in cemtan's sar2html version 4.0.0, stemming from improper handling of the Search argument in the sar2html.py script. This oversight can be exploited through SQL injection, enabling attackers to manipulate queries executed against the database. The nature of this vulnerability allows it to be exploited remotely, raising significant concerns for users. The exploit details have been made public, and the vendor was notably unresponsive to initial disclosure attempts concerning this issue.

References