CVE-2026-110666

Deferred Deferred - Pending Action

Path Traversal in cemtan sar2html via sar2html.py

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulDB

Description

A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110666

EUVD

EUVD-2026-101559

Affected Vendors & Products

Vendor	Product	Version / Range
cemtan	sar2html	4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in cemtan sar2html version 4.0.0. It occurs in the updateDb function of sar2html.py during file uploads. The application uses tarfile.extractall() without validating file paths, allowing attackers to write files outside the intended directory. Exploitation requires no authentication and is possible remotely.

Detection Guidance

Check if sar2html 4.0.0 is running by inspecting network services or processes. Look for POST requests to / endpoint handling file uploads. Review logs for unusual file paths or errors during tar extraction. Use tools like curl to test for path traversal by sending crafted requests with ../ sequences.

Impact Analysis

An attacker could overwrite critical system files, execute arbitrary code, or gain unauthorized access to sensitive data. This could lead to system compromise, data breaches, or denial of service. The impact depends on the system's configuration and the files accessible to the application.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized file access or modification. Path traversal may lead to unauthorized data exposure or manipulation, violating confidentiality and integrity requirements under these regulations.

Mitigation Strategies

Upgrade sar2html to a patched version if available. Disable file upload functionality if not required. Restrict network access to the sar2html service. Monitor for suspicious activity in logs. Apply input validation to block path traversal attempts in file uploads.

Hi! I’m here to help you understand CVE-2026-110666. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70