PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-110670 cemtan CVE debrief

A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. This issue affects installations of cemtan sar2html version 4.0.0. Defenders should assess potential exposure and SQL injection risks. The vulnerability has been publicly disclosed and defenders should prioritize verifying exposure of sar2html 4.0.0 installations and assessing potential SQL injection risks.

Vendor
cemtan
Product
sar2html
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-15
Advisory published
2026-10-14
Advisory updated
2026-10-15

Who should care

Defenders responsible for cemtan sar2html installations, particularly those using version 4.0.0, should assess potential exposure and SQL injection risks. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify exposure of sar2html 4.0.0 installations and assess potential SQL injection risks.

Why it matters

Defenders should prioritize verifying exposure of sar2html 4.0.0 installations and assessing potential SQL injection risks due to the vulnerability in the updateDb function.

  • Verify exposure of sar2html 4.0.0 installations to potential SQL injection attacks
  • Assess and mitigate potential risks associated with the updateDb function
  • Implement input validation and sanitization to prevent SQL injection

Technical summary

The vulnerability is located in the updateDb function of the sar2html.py file in the Archive Processing component of cemtan sar2html 4.0.0. The manipulation of the s2host argument results in SQL injection, which can be exploited remotely. This issue affects installations of cemtan sar2html version 4.0.0. The vulnerability has been publicly disclosed and defenders should prioritize verifying exposure of sar2html 4.0.0 installations and assessing potential SQL injection risks. The attack can be launched remotely, and defenders should assess potential exposure and SQL injection risks.

Defensive priority

Defenders should prioritize verifying exposure of sar2html 4.0.0 installations and assessing potential SQL injection risks.

Recommended defensive actions

  • Verify exposure of sar2html 4.0.0 installations
  • Assess potential SQL injection risks
  • Implement input validation and sanitization for the updateDb function
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected version. The project was informed of the problem early through an issue report but has not responded yet. The CVE record was published on 2026-10-14T20:15:15.237Z and has not been modified since then. The source item provides additional context on the vulnerability, including its impact on cemtan sar2html installations.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-110670 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-110670

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-110670 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-110670

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • cemtan sar2html Archive Processing sar2html.py updateDb sql injection

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110670.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/419833

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/419833/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-110670

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/1003778

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/cemtan/sar2html/issues/22

    Supplemental source - issue-tracking

  • Source reference

    Unverified legacy reference

    URL: https://github.com/cemtan/sar2html/

    Supplemental source - product

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.