Beveiligingsadvies

CVE-2026-47670

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-23 19:12:00

Laatst bijgewerkt 2026-07-24 20:10:09

Toegewezen door GitHub_M

CVSS-score 9.4

Status PUBLISHED

Beschrijving

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized `functionName` parameter in the `/runners/load-reader` endpoint. The `require = null` mitigation is trivially bypassed via dynamic `import()`. Version 7.1.9 contains a patch.

← Alle CVE's bekijken Bekijk op cve.org ↗