{"id":"CVE-2026-110667","summary":"cemtan sar2html sar2html.py hard-coded credentials","details":"A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.","modified":"2026-10-16T02:47:32.111926030Z","published":"2026-10-14T19:00:18.273Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-259","CWE-798"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110667.json"},"references":[{"type":"WEB","url":"https://github.com/cemtan/sar2html/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110667.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110667"},{"type":"ADVISORY","url":"https://vuldb.com/cve/CVE-2026-110667"},{"type":"ADVISORY","url":"https://vuldb.com/submit/1003761"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/419827"},{"type":"REPORT","url":"https://github.com/cemtan/sar2html/issues/19"},{"type":"REPORT","url":"https://vuldb.com/vuln/419827/cti"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cemtan/sar2html","events":[{"introduced":"ef78358907c7c795040ce92aace153c52a86332d"},{"last_affected":"ef78358907c7c795040ce92aace153c52a86332d"}],"database_specific":{"extracted_events":[{"introduced":"4.0.0"},{"last_affected":"4.0.0"}],"source":"AFFECTED_FIELD"}}],"versions":["4.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110667.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}]}