CVE-2026-110668

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-110668

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110668.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-110668

Published

2026-10-14T19:30:14Z

Modified

2026-10-16T02:47:32Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

cemtan sar2html sar2html.py index sql injection

Details

A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110668.json"
}

References

Affected packages

Git / github.com/cemtan/sar2html

Affected ranges

Type

GIT

Repo

https://github.com/cemtan/sar2html

Events

Introduced

ef78358907c7c795040ce92aace153c52a86332d

Last Affected

ef78358907c7c795040ce92aace153c52a86332d

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.0.0"
        },
        {
            "last_affected":  "4.0.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110668.json"