CVE-2020-26207

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.

• CWE-502

• https://github.com/martinjw/dbschemareader/commit/4c0ab7b1fd8c4e3140f9fd54d303f107a9c8d994Patch, Third Party Advisory
• https://github.com/martinjw/dbschemareader/releases/tag/2.7.4.3Third Party Advisory
• https://github.com/martinjw/dbschemareader/security/advisories/GHSA-rfjh-m356-mpqfThird Party Advisory
• https://github.com/martinjw/dbschemareader/commit/4c0ab7b1fd8c4e3140f9fd54d303f107a9c8d994Patch, Third Party Advisory
• https://github.com/martinjw/dbschemareader/releases/tag/2.7.4.3Third Party Advisory
• https://github.com/martinjw/dbschemareader/security/advisories/GHSA-rfjh-m356-mpqfThird Party Advisory

Published

Nov 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26198Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 …6.1
• CVE-2020-26199Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0…6.7
• CVE-2020-2620Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26200A component of Kaspersky custom boot loader allowed loading …6.8
• CVE-2020-26201Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a…9.8
• CVE-2020-26205Sal is a multi-tenanted reporting dashboard for Munki with t…5.4
• CVE-2020-26208JHEAD is a simple command line tool for displaying and some …6.1
• CVE-2020-2621Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26210In BookStack before version 0.30.4, a user with permissions …8.7
• CVE-2020-26211In BookStack before version 0.30.4, a user with permissions …8.7
• CVE-2020-26212GLPI stands for Gestionnaire Libre de Parc Informatique and …6.5
• CVE-2020-26213In teler before version 0.0.1, if you run teler inside a Doc…7.5