{"id":"CVE-2026-110667","published":"2026-10-14T19:17:11.550","lastModified":"2026-10-15T14:45:38.353","description":"A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.","cvssScore":7.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-259","CWE-798"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cemtan/sar2html/","tags":[]},{"url":"https://github.com/cemtan/sar2html/issues/19","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-110667","tags":[]},{"url":"https://vuldb.com/submit/1003761","tags":[]},{"url":"https://vuldb.com/vuln/419827","tags":[]},{"url":"https://vuldb.com/vuln/419827/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/cemtan/sar2html/","tags":[]},{"url":"https://github.com/cemtan/sar2html/issues/19","tags":[]}],"hasPoc":true,"ai":null}