RCE in Dbgate
CVE-2026-47670
DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized…
Vulnerability class: Command Injection (OS Command Injection)
Affected products
- Dbgate — versions < 7.1.9
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-47670?
- CVE-2026-47670 is a vulnerability in Dbgate, classified under Command Injection. Published 2026-07-23.
- Is CVE-2026-47670 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.