DB
Product
dbgate
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 5Low 0
Watch
Add dbgate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47668 | 10.0 | Jul 23 | DbGate: Unauthenticated Remote Code Execution via JSON Script Runner Affected: < 7.1.9 |
| CVE-2026-47670 | 9.4 | Jul 23 | DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection Affected: < 7.1.9 |
| CVE-2026-47669 | 9.3 | Jul 23 | DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE Affected: < 7.1.9 |
| CVE-2026-85176 | 8.8 | Sep 3 | DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid Affected: through 7.2.6 |
| CVE-2026-48017 | 8.8 | Jun 15 | DbGate: Remote Code Execution via functionName injection in loadReader endpoint Affected: < 7.1.9 |
| CVE-2026-34725 | 8.2 | Apr 2 | dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration Affected: >= 7.0.0, < 7.1.5 |
| CVE-2026-101067 | 7.3 | Sep 28 | dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal Affected: 6.8.0; 6.8.1; 7.0.0; 7.0.1; 7.0.2; 7.1.0; +16 more |
| CVE-2026-101066 | 7.3 | Sep 28 | dbgate Archive Link Creation archive.js createLink path traversal Affected: 7.3.0; 7.3.1 |
| CVE-2026-101069 | 6.5 | Sep 28 | dbgate Export databaseConnections.js exportModelSql path traversal Affected: 7.3.0; 7.3.1 |
| CVE-2026-101068 | 6.5 | Sep 28 | dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal Affected: 7.3.0; 7.3.1 |
| CVE-2026-97226 | 6.3 | Sep 24 | DbGate files-style Endpoint files.js fs.readFile path traversal Affected: 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4; 7.2.5; +2 more |
| CVE-2026-97225 | 6.3 | Sep 24 | DbGate JSON Runner runners.js code injection Affected: 7.2.5-beta.0; 7.2.5-beta.1; 7.2.5-beta.2; 7.2.5-beta.3; 7.2.5-beta.4; 7.2.5-beta.5 |
| CVE-2026-101070 | 5.3 | Sep 28 | dbgate Files Endpoint runners.js files path traversal Affected: 7.3.0; 7.3.1 |
Showing 13