DBeaver
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CloudBeaver | 2 | – | Oct 11, 2026 |
| dbeaver/dbeaver | 1 | – | Dec 14, 2021 |
Exploited and recent CVEs
- CVE-2026-108745 CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet 0.2%
- CVE-2026-108742 CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation 0.2%
- CVE-2021-3836 Improper Restriction of XML External Entity Reference in dbeaver/dbeaver 0.9%