What’s Vulnerable › Products

dbgate vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your dbgate version is affected

Latest dbgate vulnerabilities

• CVE-2026-101070 — dbgate Files Endpoint runners.js files path traversal (CVSS 5.3)
• CVE-2026-101069 — dbgate Export databaseConnections.js exportModelSql path traversal (CVSS 6.5)
• CVE-2026-101068 — dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal (CVSS 6.5)
• CVE-2026-101067 — dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal (CVSS 7.3)
• CVE-2026-101066 — dbgate Archive Link Creation archive.js createLink path traversal (CVSS 7.3)
• CVE-2026-97226 — DbGate files-style Endpoint files.js fs.readFile path traversal (CVSS 6.3)
• CVE-2026-97225 — DbGate JSON Runner runners.js code injection (CVSS 6.3)
• CVE-2026-6216 — DbGate SVG Icon String FontIcon.svelte cross site scripting (CVSS 3.5)
• CVE-2026-6215 — DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery (CVSS 6.3)