CVE-2026-110666— cemtan sar2html File Upload sar2html.py updateDb path traversal
Quick assessment
Affected
cemtan sar2html
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed o
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110666
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
cemtan sar2html File Upload sar2html.py updateDb path traversal
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110666
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110666
请登录查看更多情报信息。
Other References for CVE-2026-110666 (1)
-
CVE-2026-110666 | cemtan sar2html 4.0.0 File Upload sar2html.py updateDb path traversal (Issue 18) vdb-entry technical-description
Other References for CVE-2026-110666 (5)
-
https://github.com/cemtan/sar2html/issues/18 issue-tracking
-
https://vuldb.com/cve/CVE-2026-110666 third-party-advisory
-
-
https://vuldb.com/submit/1003748 third-party-advisory
Same Patch Batch · cemtan · 2026-10-14 · 5 CVEs total
| CVE-2026-110667 | 7.3 HIGH | cemtan sar2html sar2html.py hard-coded credentials |
| CVE-2026-110668 | 7.3 HIGH | cemtan sar2html sar2html.py index sql injection |
| CVE-2026-110670 | 7.3 HIGH | cemtan sar2html Archive Processing sar2html.py updateDb sql injection |
| CVE-2026-110669 | 6.5 MEDIUM | cemtan sar2html sar2html.py deleteAll missing authentication |
IV. Related Vulnerabilities
Same product: sar2html
-
CVE-2026-110670
cemtan sar2html Archive Processing sar2html.py updateDb sql -
CVE-2026-110669
cemtan sar2html sar2html.py deleteAll missing authentication -
CVE-2026-110668
cemtan sar2html sar2html.py index sql injection -
CVE-2026-110667
cemtan sar2html sar2html.py hard-coded credentials -
CVE-2026-18719
cemtan sar2html Search sar2html.py sql injection
Same vendor: cemtan
-
CVE-2026-110670
cemtan sar2html Archive Processing sar2html.py updateDb sql -
CVE-2026-110669
cemtan sar2html sar2html.py deleteAll missing authentication -
CVE-2026-110668
cemtan sar2html sar2html.py index sql injection -
CVE-2026-110667
cemtan sar2html sar2html.py hard-coded credentials -
CVE-2026-18719
cemtan sar2html Search sar2html.py sql injection
Same weakness: CWE-22
-
CVE-2026-104107
FileRise: Authenticated path traversal escapes configured st -
CVE-2026-0312
Checkov by Prisma Cloud: Path Traversal Vulnerabilities -
CVE-2026-62664
FileRise: Authenticated path traversal in createFolder allow -
CVE-2026-110766
Colanode Server through 0.4.7 Path Traversal via Avatar Down -
CVE-2026-100406
dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs se
V. Comments for CVE-2026-110666
No comments yet