Description
A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-14
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote privilege escalation via unauthenticated deletion functions causing data loss and potential denial of service
Action: Apply Workaround
AI Analysis

Impact

Unauthenticated deletion functions in cemtan sar2html 4.0.0 allow an attacker to remotely delete hosts, ranges, or all data without verifying credentials, resulting in loss of data integrity and availability.

Affected Systems

The vulnerability affects cemtan’s sar2html applications, specifically version 4.0.0 where deleteHost, deleteRange, and deleteAll functions lack authentication; the issue is present in the sar2html.py module of that release.

Risk and Exploitability

With a CVSS score of 6.9 the flaw presents moderate severity; the exploit is publicly disclosed and can be carried out from remote locations without authentication, yet the EPSS score is not available, and the vulnerability is not listed in CISA KEV. Attackers can exploit this weakness immediately by issuing delete requests over the exposed service, so the risk is significant until a fix or mitigation is applied.

Generated by OpenCVE AI on October 15, 2026 at 13:13 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Patch sar2html.py to add an authentication check before executing deleteHost, deleteRange, or deleteAll until an official vendor fix is released.
  • Use firewall or VPN controls to restrict external network reachability to the sar2html service, limiting the attack surface to trusted hosts.
  • Set up logging and alerting for any delete‑related API calls and investigate suspicious activities promptly.
  • Apply the vendor’s official security update for sar2html as soon as it is available.

Generated by OpenCVE AI on October 15, 2026 at 13:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title cemtan sar2html sar2html.py deleteAll missing authentication
First Time appeared Cemtan
Cemtan sar2html
Weaknesses CWE-287
CWE-306
CPEs cpe:2.3:a:cemtan:sar2html:*:*:*:*:*:*:*:*
Vendors & Products Cemtan
Cemtan sar2html
References
Metrics cvssV2_0

{'score': 6.4, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Cemtan Sar2html
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-14T19:45:14.711Z

Reserved: 2026-10-14T13:11:46.298Z

Link: CVE-2026-110669

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-14T20:17:31.190

Modified: 2026-10-15T14:45:38.353

Link: CVE-2026-110669

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-15T13:15:07Z

Weaknesses
  • CWE-287

    Improper Authentication

  • CWE-306

    Missing Authentication for Critical Function