Ddbgate

Products

Exploited and recent CVEs

• CVE-2026-121455 Medium 5.4 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save 0.3%
• CVE-2026-85176 High 8.8 DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid 0.6%
• CVE-2026-47669 Critical 9.3 DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE 0.5%
• CVE-2026-47670 Critical 9.4 DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection 1.8%
• CVE-2026-47668 Critical 10.0 DbGate: Unauthenticated Remote Code Execution via JSON Script Runner 3.9%
• CVE-2026-48017 High 8.8 DbGate: Remote Code Execution via functionName injection in loadReader endpoint 0.5%
• CVE-2026-34725 High 8.3 dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration 0.2%
• CVE-2025-50185 High 7.0 DbGate allows Unauthorized File Access via CSV Plugin 0.5%
• CVE-2025-50184 High 7.1 DbGate allows for File Traversal via file parameter 0.6%