CVE-2026-110670

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-110670

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110670.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-110670

Published

2026-10-14T20:15:15Z

Modified

2026-10-16T02:47:56Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X CVSS Calculator

Summary

cemtan sar2html Archive Processing sar2html.py updateDb sql injection

Details

A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110670.json"
}

References

Affected packages

Git / github.com/cemtan/sar2html

Affected ranges

Type

GIT

Repo

https://github.com/cemtan/sar2html

Events

Introduced

ef78358907c7c795040ce92aace153c52a86332d

Last Affected

ef78358907c7c795040ce92aace153c52a86332d

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.0.0"
        },
        {
            "last_affected":  "4.0.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110670.json"