Skip to content
fr Sign in
5.3 Medium

CVE-2026-97226 A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1

Description

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products and versions

Product Affected versions Fixed in
DbGate 7.3 7.3.1-premium-beta.0 → 7.3.1-premium-beta.1 No fix stated
DbGate 7.2 7.2.0 → 7.2.5 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DbGate

The 9 CVEs of DbGate →
CVE-2026-101070 A security vulnerability has been detected in dbgate up to 7.3.1 6.9 Medium CVE-2026-101069 A weakness has been identified in dbgate up to 7.3.1 6.9 Medium CVE-2026-101068 A security flaw has been discovered in dbgate up to 7.3.1 6.9 Medium CVE-2026-101067 A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1 6.9 Medium
Track this CVE