Description
A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cemtan | sar2html | 4.0.0 | — |
References
- VDB-419827 | cemtan sar2html sar2html.py hard-coded credentials vdb-entry technical-description
- VDB-419827 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-110667 | CVE Analysis and Report third-party-advisory
- Submit #1003761 | cemtan sar2html 4.0.0 Hardcoded Credentials third-party-advisory
- https://github.com/cemtan/sar2html/issues/19 issue-tracking
- https://github.com/cemtan/sar2html/ product