CVE-2026-47669
DbGate database manager versions 7.1.8 and earlier allow an attacker to extract a malicious ZIP file that writes files anywhere on the host system. The flaw is caused by missing path validation in the unzipDirectory function. In the default Docker deployment, the application runs as root and accepts unauthenticated login, so any nearby attacker can exploit it.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
DbGate 7.1.8 and earlier, especially when run in the default Docker container as root with the none authentication provider.
Real-world impact
An attacker can write arbitrary files anywhere on the host, potentially installing malware, modifying system files, or creating backdoors, leading to full system compromise.
Why this severity
The CVSS score of 9.3 reflects that the vulnerability allows an attacker to write files anywhere on the host with no authentication, giving complete control over confidentiality, integrity, and availability. The high impact and lack of required privileges make it critical.
What to do about it
- 01Upgrade DbGate to version 7.1.9 or later.
- 02Restart the DbGate service.
NVD-referenced vendor advisory
Timeline
- Jul 23, 2026 · 9d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 23, 2026 · 8d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 28, 2026 · 4d agoAdvisory updatedThe NVD record was last revised.