CVE-2026-85176High· 8.8▾ TwilightDbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
0.3% → 0.6%
DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file:// scheme resolution. Attackers can exploit getJslFileName() to bypass directory containment and access sensitive files including encrypted database credentials stored in connections configuration.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101070Medium· 5.3A security vulnerability has been detected in dbgate up to 7.3.1
CVE-2026-101067High· 7.3A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1
CVE-2026-101068Medium· 6.5A security flaw has been discovered in dbgate up to 7.3.1
CVE-2026-101066High· 7.3A vulnerability was determined in dbgate up to 7.3.1
CVE-2026-101069Medium· 6.5A weakness has been identified in dbgate up to 7.3.1
CVE-2026-97226Medium· 6.3A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1