Authenticated Remote Code Execution (RCE)

DbGate is vulnerable to authenticated Remote Code Execution RCE. The vulnerability is due to improper sanitization of the functionName parameter in the /runners/load-reader endpoint, which allows an authenticated attacker to bypass the require = null mitigation using dynamic import and execute...

Exploit for CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via function...