CVE-2026-110667

CVSS 7.3 (high) · published 2026-10-14

A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

Weakness: CWE-259, CWE-798

Source: NVD CVE-2026-110667

References

• https://github.com/cemtan/sar2html/
• https://github.com/cemtan/sar2html/issues/19
• https://vuldb.com/cve/CVE-2026-110667
• https://vuldb.com/submit/1003761
• https://vuldb.com/vuln/419827
• https://vuldb.com/vuln/419827/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.