Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: dbgate Clear all filters
TI-2026-84348 CVE-2026-121455 · GHSA-23v4-23h4-8j67

Missing authorization in DbGate connection test and save endpoints

Priority LOW 24

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2026-11-03 Fixed in 7.3.3 CWE-862
TI-2026-58509 CVE-2026-85176 · GHSA-jw66-5j32-j2m2

DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

Priority MEDIUM 41

DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00631 Published 2026-09-03 No fix listed CWE-73