Dataease SQLBot vulnerabilities

Newest CVEs

• CVE-2026-121453

  SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

  dataease · SQLBot

  Medium5.1
• CVE-2026-93660

  SQLBot through 1.10.1 Improper Access Control via Dashboard Update

  dataease · SQLBot

  High7.1
• CVE-2026-53557

  SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution

  dataease · SQLBot

  High7.7
• CVE-2026-53555

  Stored XSS via SVG Upload

  dataease · SQLBot

  Medium5.1
• CVE-2026-53556

  SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read

  dataease · SQLBot

  Medium6.0
• CVE-2026-53554

  SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing

  dataease · SQLBot

  High7.3
• CVE-2026-72743

  SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html

  dataease · SQLBot

  Medium5.1
• CVE-2026-42463

  SQLBot: Unauthorized Access Vulnerability

  dataease · SQLBot

  High8.6
• CVE-2026-33324

  SQLBot prompt injection allows arbitrary SQL execution and remote code execution

  dataease · SQLBot

  Critical9.4
• CVE-2026-5417

  Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery

  Dataease · SQLbot

  Medium5.1