dbgate-serve (>=7.1.3-alpha.3, <=7.1.8), dbmodel (>=7.1.3-alpha.3, <=7.1.8) potentially affected by CVE-2026-47669 via dbgate-api (>=7.1.3-alpha.3, <=7.1.8-alpha.7)

dbgate-api NPM version =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.8 Source cves: CVE-2026-47669 Source advisory: SNYK:JS-DBGATEAPI-17817001...

PT-2026-47063

Name of the Vulnerable Software and Affected Versions DbGate versions prior to 7.1.9 Description DbGate is subject to authenticated remote code execution. Users with valid credentials can execute arbitrary operating system commands as root by exploiting an unsanitized functionName parameter in th...

CVE-2026-47669

creationtimestamp| type| source ---|---|--- 2026-05-20 09:30:38+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-h535-j5hr-mv56 2026-07-23 20:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdmxhn4rv2q...