CVE-2026-110670— cemtan sar2html Archive Processing sar2html.py updateDb sql injection
Quick assessment
Affected
cemtan sar2html
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 cemtan sar2html 4.0.0 中发现了一个漏洞。受影响的组件是“Archive Processing”（归档处理）模块中的 sar2html.py 文件的 updateDb 函数。对该函数的参数 s2host 进行操作可导致 SQL 注入攻击。该漏洞可由远程攻击者发起利用。项目方已通过早期提交的问题报告知悉此安全问题，但截至目前尚未作出回应。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110670
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
cemtan sar2html Archive Processing sar2html.py updateDb sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-110670
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110670
请登录查看更多情报信息。
Other References for CVE-2026-110670 (2)
Same Patch Batch · cemtan · 2026-10-14 · 5 CVEs total
| CVE-2026-110667 | 7.3 HIGH | cemtan sar2html sar2html.py hard-coded credentials |
| CVE-2026-110668 | 7.3 HIGH | cemtan sar2html sar2html.py index sql injection |
| CVE-2026-110666 | 6.5 MEDIUM | cemtan sar2html File Upload sar2html.py updateDb path traversal |
| CVE-2026-110669 | 6.5 MEDIUM | cemtan sar2html sar2html.py deleteAll missing authentication |
IV. Related Vulnerabilities
Same product: sar2html
-
CVE-2026-110669
cemtan sar2html sar2html.py deleteAll missing authentication -
CVE-2026-110668
cemtan sar2html sar2html.py index sql injection -
CVE-2026-110667
cemtan sar2html sar2html.py hard-coded credentials -
CVE-2026-110666
cemtan sar2html File Upload sar2html.py updateDb path traver -
CVE-2026-18719
cemtan sar2html Search sar2html.py sql injection
Same vendor: cemtan
-
CVE-2026-110669
cemtan sar2html sar2html.py deleteAll missing authentication -
CVE-2026-110668
cemtan sar2html sar2html.py index sql injection -
CVE-2026-110667
cemtan sar2html sar2html.py hard-coded credentials -
CVE-2026-110666
cemtan sar2html File Upload sar2html.py updateDb path traver -
CVE-2026-18719
cemtan sar2html Search sar2html.py sql injection
Same weakness: CWE-89
-
CVE-2026-94388
WordPress Green Popups plugin < 7.6.3 - SQL Injection vulner -
CVE-2026-111178
WP Booking System <= 2.1.0.1 - Authenticated (Administrator+ -
CVE-2026-109414
Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via -
CVE-2026-111106
Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection -
CVE-2026-93953
Backuply <= 1.5.8 - Authenticated (Subscriber+) Second-Order
V. Comments for CVE-2026-110670
No comments yet