These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. This issue affects installations of cemtan sar2html version 4.0.0. Defenders should assess potential exposure and SQL injection risks. The vulnera [truncated]
A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the functions deleteHost, deleteRange, and deleteAll in the file sar2html.py, leading to missing authentication. The attack can be performed remotely. The exploit has been publicly disclosed and may be used. The project was informed early through an issue report but has not responded yet. The vulnerability allows unauthorize [truncated]
A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A security flaw has been discovered in cemtan sar2html version 4.0.0. The vulnerability affects an unknown functionality of the file sar2html.py, where the manipulation of the argument SECRET_KEY results in hard-coded credentials. This issue allows for remote execution of the attack. The project was informed early through an issue report but has not yet responded. Defenders should assess the situation and [truncated]
A vulnerability was identified in cemtan sar2html 4.0.0, affecting the function updateDb of the file sar2html.py in the File Upload component, leading to path traversal. The project was informed but has not responded yet. This vulnerability allows for path traversal, which could lead to unauthorized access or modification of sensitive files. Defenders should assess the exposure of systems using sar2html 4 [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-04T02:16:16.973Z and has not been modified since then. A SQL injection vulnerability was detected in cemtan sar2html 4.0.0, specifically in the search functionality. The vulnerability allows for remote attacks and has a publicly available exploit. However, details are limited, and the vendor did not [truncated]