CVE-2026-110669

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-110669

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110669.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-110669

Published

2026-10-14T19:45:14Z

Modified

2026-10-15T10:47:30Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

cemtan sar2html sar2html.py deleteAll missing authentication

Details

A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-287",
        "CWE-306"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110669.json"
}

References

Affected packages

Git / github.com/cemtan/sar2html

Affected ranges

Type

GIT

Repo

https://github.com/cemtan/sar2html

Events

Introduced

ef78358907c7c795040ce92aace153c52a86332d

Last Affected

ef78358907c7c795040ce92aace153c52a86332d

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.0.0"
        },
        {
            "last_affected":  "4.0.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110669.json"