Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

dbgate — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in dbgate, with AI-generated Chinese analysis, references, and POCs.

Vendor: dbgate

CVE ID Title CVSS Severity Published
CVE-2026-85176 DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid CWE-73 8.8 High 2026-09-03
CVE-2026-47669 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE CWE-22 9.3 Critical 2026-07-23
CVE-2026-47670 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection CWE-77 9.4 Critical 2026-07-23
CVE-2026-47668 DbGate: Unauthenticated Remote Code Execution via JSON Script Runner CWE-20 10.0 Critical 2026-07-23
CVE-2026-48017 DbGate: Remote Code Execution via functionName injection in loadReader endpoint CWE-94 8.8 High 2026-06-15
CVE-2026-6216 DbGate SVG Icon String FontIcon.svelte cross site scripting CWE-79 3.5 Low 2026-04-13
CVE-2026-6215 DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery CWE-918 6.3 Medium 2026-04-13
CVE-2026-34725 dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration CWE-94 8.3 High 2026-04-02
CVE-2025-50185 DbGate allows Unauthorized File Access via CSV Plugin CWE-29 6.5 - 2025-07-26
CVE-2025-50184 DbGate allows for File Traversal via file parameter CWE-29 7.5 - 2025-07-26

All 10 known CVE vulnerabilities affecting dbgate with full Chinese analysis, references, and POCs where available.