Vulnerabilities in dbgate

7 results

Vexday analysis

DbGate apresenta 7 vulnerabilidades catalogadas, com 3 delas em nível crítico, predominantemente relacionadas a execução de código arbitrário (CWE-94). Apesar de 4 vulnerabilidades terem sido publicadas nos últimos 90 dias, nenhuma está sob ataque ativo conhecido no momento, reduzindo o risco imediato mas exigindo atenção à atualização contínua.

CVE-2026-47668CRITICALDbGate: Unauthenticated Remote Code Execution via JSON Script RunnerEPSS 4.3%CVE-2026-47670CRITICALDbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injectionEPSS 1.7%CVE-2025-50184HIGHDbGate allows for File Traversal via file parameterEPSS 0.6%CVE-2026-48017HIGHDbGate: Remote Code Execution via functionName injection in loadReader endpointEPSS 0.5%CVE-2025-50185HIGHDbGate allows Unauthorized File Access via CSV PluginEPSS 0.4%CVE-2026-47669CRITICALDbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCEEPSS 0.3%CVE-2026-34725HIGHdbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configurationEPSS 0.2%