CVE-2026-110669: cemtan sar2html sar2html.py deleteAll missing authentication
A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be performed remotely and requires no privileges or user interaction. Public exploit information is available.
Which deployments should be treated as exposed?
Deployments using cemtan sar2html 4.0.0 should be considered affected, particularly where the sar2html.py functionality is remotely reachable. The affected functions are deleteHost, deleteRange, and deleteAll.
What is the expected security impact?
The reported CVSS vector indicates low integrity and availability impact, with no confidentiality impact. The issue allows manipulation through functions that lack authentication.
Is a vendor fix available?
The provided information does not identify a fix or patched version. It states that the project was notified through an issue report but had not responded.