CVE-2026-110668: SQL Injection in cemtan sar2html
Description
CVE-2026-110668 is a medium severity SQL injection vulnerability in cemtan sar2html version 4.0.0. The flaw exists in the index function of sar2html.py, where manipulation of the 'sort' argument allows remote attackers to perform SQL injection. An exploit is publicly available, but no vendor response or patch has been issued yet.
CVSS v4.0
Score 6.9medium
Affected software
cemtan
sar2html
cpe:2.3:a:cemtan:sar2html:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects cemtan sar2html version 4.0.0. The index function in sar2html.py improperly handles the 'sort' argument, enabling an attacker to inject SQL commands remotely. This can lead to unauthorized database queries or data manipulation. The issue was reported early to the project, but no fix or official response has been provided. Public exploit code exists, increasing the risk of exploitation.
Potential Impact
Successful exploitation allows remote attackers to perform SQL injection via the 'sort' parameter, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity), indicating a significant risk but not critical. No known active exploitation in the wild has been reported.
Mitigation Recommendations
No official fix or patch is currently available from the vendor. Users should monitor the project for updates and consider implementing application-level input validation or filtering on the 'sort' parameter to mitigate injection risks until a patch is released.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-14T13:11:42.219Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6acfdcbd2cdf04f656a8925a
Added to database: 10/14/2026, 19:49:17 UTC
Last enriched: 10/14/2026, 20:03:24 UTC
Last updated: 10/14/2026, 20:08:15 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.