DB
Vendor
dbgate
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-101070 | DB dbgate Dbgate | 5.3 | Sep 28 | dbgate Files Endpoint runners.js files path traversal |
| CVE-2026-101069 | DB dbgate Dbgate | 6.5 | Sep 28 | dbgate Export databaseConnections.js exportModelSql path traversal |
| CVE-2026-101068 | DB dbgate Dbgate | 6.5 | Sep 28 | dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal |
| CVE-2026-101067 | DB dbgate Dbgate | 7.3 | Sep 28 | dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal |
| CVE-2026-101066 | DB dbgate Dbgate | 7.3 | Sep 28 | dbgate Archive Link Creation archive.js createLink path traversal |
| CVE-2026-97226 | DB DbGate Dbgate | 6.3 | Sep 24 | DbGate files-style Endpoint files.js fs.readFile path traversal |
| CVE-2026-97225 | DB DbGate Dbgate | 6.3 | Sep 24 | DbGate JSON Runner runners.js code injection |
| CVE-2026-85176 | DB dbgate dbgate | 8.8 | Sep 3 | DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid |
| CVE-2026-47669 | DB dbgate dbgate | 9.3 | Jul 23 | DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE |
| CVE-2026-47670 | DB dbgate dbgate | 9.4 | Jul 23 | DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection |
| CVE-2026-47668 | DB dbgate dbgate | 10.0 | Jul 23 | DbGate: Unauthenticated Remote Code Execution via JSON Script Runner |
| CVE-2026-48017 | DB dbgate dbgate | 8.8 | Jun 15 | DbGate: Remote Code Execution via functionName injection in loadReader endpoint |
| CVE-2026-34725 | DB dbgate dbgate | 8.2 | Apr 2 | dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration |