CVE-2026-110666

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-110666

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110666.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-110666

Published

2026-10-14T18:45:13Z

Modified

2026-10-15T10:47:27Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

cemtan sar2html File Upload sar2html.py updateDb path traversal

Details

A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110666.json"
}

References

Affected packages

Git / github.com/cemtan/sar2html

Affected ranges

Type

GIT

Repo

https://github.com/cemtan/sar2html

Events

Introduced

ef78358907c7c795040ce92aace153c52a86332d

Last Affected

ef78358907c7c795040ce92aace153c52a86332d

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.0.0"
        },
        {
            "last_affected":  "4.0.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110666.json"