dbgate vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20267

Newest CVEs

• CVE-2026-121455

  DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save

  dbgate · dbgate

  Medium5.3
• CVE-2026-85176

  DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

  dbgate · dbgate

  High8.7
• CVE-2026-47669

  DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

  dbgate · dbgate

  Critical9.3
• CVE-2026-47670

  DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

  dbgate · dbgate

  Critical9.4
• CVE-2026-47668

  DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

  dbgate · dbgate

  Critical10.0
• CVE-2026-48017

  DbGate: Remote Code Execution via functionName injection in loadReader endpoint

  dbgate · dbgate

  High8.8
• CVE-2026-34725

  dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration

  dbgate · dbgate

  High8.3
• CVE-2025-50185

  DbGate allows Unauthorized File Access via CSV Plugin

  dbgate · dbgate

  High7.0
• CVE-2025-50184

  DbGate allows for File Traversal via file parameter

  dbgate · dbgate

  High7.1