Dbgate — PoC Archivehttps://poc.intelseclab.com/tags/dbgate/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000DbGate Unauthenticated RCE via JSON Script Runner (CVE-2026-47668)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47668-dbgate-json-script-runner-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-47668-dbgate-json-script-runner-rce/Critical severity (CVSS 3.1) — web · CVE-2026-47668. Status: PoC. Affects: DbGate (dbgate-serve — web-based database management tool). Tags: dbgate, rce, code-injection, javascript-injection, cwe-94, cwe-20, cwe-1188, database-management.webCriticaldbgatercecode-injectionjavascript-injectioncwe-94cwe-20cwe-1188database-managementDbGate `loadReader` `functionName` Injection RCE (CVE-2026-48017)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-48017-dbgate-loadreader-functionname-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-48017-dbgate-loadreader-functionname-rce/High severity (CVSS 8.8) — web · CVE-2026-48017 / GHSA-hv83-ggc4-v385. Status: PoC. Affects: DbGate (dbgate-api), a web-based database management GUI. Tags: dbgate, nodejs, code-injection, rce, cwe-94, authenticated, database-gui.webHighdbgatenodejscode-injectionrcecwe-94authenticateddatabase-gui