CVE-2026-97226 | DbGate up to 7.2.5/7.3.1-premium-beta.1 files-style Endpoint files.js fs.readFile filePath/uri path traversal

A vulnerability, which was classified as critical, has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal.

This vulnerability is traded as CVE-2026-97226. It is possible to initiate the attack remotely. There is no exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More