CVE-2026-101067

A path traversal vulnerability exists in dbgate versions up to 6.8.1, 7.0.2, 7.1.8, and 7.2.5. The flaw resides in the saveUploadedFile function of the files.js file within the save-uploaded-file endpoint. By manipulating the filePath or fileName arguments, an attacker can perform path traversal....

EUVD-2026-88238

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...