Login Request a demo
DA
Product
databasement
by David-Crty · last CVE Oct 18, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add databasement to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108963
8.8
2%
Oct 11
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user
Affected: 1.0.0 before 1.8.2
CVE-2026-95654
7.4
1%
Sep 22
Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
Affected: before 1.7.14
CVE-2026-103534
6.3
0%
Oct 1
David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control
Affected: 1.7.0; 1.7.1
CVE-2026-111875
4.7
0%
Oct 18
David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization
Affected: 1.8.0; 1.8.1
CVE-2026-103533
4.1
0%
Oct 1
David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal
Affected: 1.7.0; 1.7.1
Showing 5