TI-2026-35175 CVE-2026-47668 · GHSA-8v3q-9vmx-36vc
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
Priority HIGH 82
DbGate is cross-platform database manager.
dbgate
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
dbgate records in CISA KEVNo dbgate vulnerabilities are listed in CISA KEV.
Records
9 records
TI-2026-35176 CVE-2026-47669 · GHSA-h535-j5hr-mv56
DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE
Priority HIGH 81
DbGate is cross-platform database manager.
TI-2026-35177 CVE-2026-47670 · GHSA-wm5r-5qp3-5vxf
DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection
Priority HIGH 76
DbGate is cross-platform database manager.
TI-2026-35462 CVE-2026-48017 · GHSA-hv83-ggc4-v385
DbGate: Remote Code Execution via functionName injection in loadReader endpoint
Priority HIGH 73
DbGate is cross-platform database manager.
TI-2026-26969 CVE-2026-34725 · GHSA-35xm-qvjg-8m42
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration
Priority HIGH 71
DbGate is cross-platform database manager.
Priority MEDIUM 64
DbGate is cross-platform database manager.
TI-2026-58509 CVE-2026-85176 · GHSA-jw66-5j32-j2m2
DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid
Priority MEDIUM 41
DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution.
Priority LOW 38
DbGate is cross-platform database manager.
TI-2026-84348 CVE-2026-121455 · GHSA-23v4-23h4-8j67
Missing authorization in DbGate connection test and save endpoints
Priority LOW 24
DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission.