DB
Product
dbgate
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 5Low 0
Watch
Add dbgate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85176 | 8.8 | Sep 3 | DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid Affected: through 7.2.6 |
| CVE-2026-48017 | 8.8 | Jun 15 | DbGate: Remote Code Execution via functionName injection in loadReader endpoint Affected: < 7.1.9 |
| CVE-2026-34725 | 8.2 | Apr 2 | dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration Affected: >= 7.0.0, < 7.1.5 |
| CVE-2026-101067 | 7.3 | Sep 28 | dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal Affected: 6.8.0; 6.8.1; 7.0.0; 7.0.1; 7.0.2; 7.1.0; +16 more |
| CVE-2026-101066 | 7.3 | Sep 28 | dbgate Archive Link Creation archive.js createLink path traversal Affected: 7.3.0; 7.3.1 |
Showing 5
