What’s Vulnerable › Vulnerabilities

CVE-2026-85176: DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-03 · updated 2026-09-23
• Weakness: CWE-73

Description

DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files including encrypted database credentials stored in connections configuration.

Affected products

• dbgate: through 7.2.6

References

• https://github.com/dbgate/dbgate
• https://github.com/dbgate/dbgate/blob/v7.2.6/packages/api/src/controllers/jsldata.js
• https://github.com/dbgate/dbgate/blob/v7.2.6/packages/api/src/utility/getJslFileName.js
• https://github.com/dbgate/dbgate/issues/1502
• https://www.vulncheck.com/advisories/dbgate-through-7.2.6-arbitrary-file-read-and-write-via-file-jslid

Get alerted when CVE-2026-85176 or the next vulnerability affects your stack