CVE-2026-124558

A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. The impacted element is the function SqlGateway.onOpen of the file SqlGateway.java of the component sql-gateway Endpoint. Such manipulation of the argument connectAddress leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The researcher claims to have submitted a GHSA on the repository of the project.

• CWE-918

• https://github.com/DataLinkDC/dinky/
• https://github.com/DataLinkDC/dinky/security/advisories/GHSA-x4hx-f425-mrx6
• https://vuldb.com/cve/CVE-2026-124558
• https://vuldb.com/submit/1035494
• https://vuldb.com/vuln/432891
• https://vuldb.com/vuln/432891/cti

Published

Nov 9, 2026

Last Modified

Nov 13, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-124552Webmin through 2.670 contains a stored cross-site scripting …4.8
• CVE-2026-124553BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaus…7.5
• CVE-2026-124554A security flaw has been discovered in JeecgBoot 3.9.5. This…7.3
• CVE-2026-124555A weakness has been identified in JeecgBoot 3.9.5. This vuln…6.3
• CVE-2026-124556A security vulnerability has been detected in kekingcn kkFil…4.3
• CVE-2026-124557A vulnerability was detected in OtterMind Chat2DB up to 5.3.…7.3
• CVE-2026-12456Inappropriate implementation in Extensions in Google Chrome …4.2
• CVE-2026-124560A vulnerability was found in D-Link DIR-878 1.20B05. This af…9.8
• CVE-2026-124561A vulnerability was determined in D-Link DIR-878 1.20B05. Th…7.5
• CVE-2026-124562A vulnerability was identified in D-Link DIR-878 1.20B05. Af…7.5
• CVE-2026-124563A security flaw has been discovered in D-Link DIR-878 1.20B0…7.5
• CVE-2026-124564A weakness has been identified in D-Link DIR-878 1.20B05. Af…5.3