CVE-2026-110666: cemtan sar2html File Upload sar2html.py updateDb path traversal
A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is remotely exploitable and requires no privileges or user interaction according to the supplied CVSS vector. Exploitation involves manipulating input handled by the updateDb function in sar2html.py's file-upload component.
What is the likely impact of successful exploitation?
The provided severity vector indicates low integrity and availability impact, with no confidentiality impact. The vulnerability is classified as path traversal, meaning attacker-controlled path manipulation is involved.
Is a fix available from the project?
The project was notified through an issue report but had not responded at the time of publication. No patch, fixed version, or workaround is identified in the provided information.