CVE-2026-121455

DbGate versions prior to 7.3.3 are vulnerable to a missing authorization flaw in the test() and save() functions. The root cause is that these functions fail to call testConnectionPermission , allowing authenticated users with connection restrictions to bypass LOGIN_PERMISSIONS . An attacker can ...