CVE-2026-6216

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 7.1.5 mitigates this issue. It is advisable to upgrade the affected component.

• CWE-79
• CWE-94

• https://github.com/dbgate/dbgate/
• https://github.com/dbgate/dbgate/releases/tag/v7.1.5
• https://vuldb.com/submit/785841
• https://vuldb.com/vuln/357135
• https://vuldb.com/vuln/357135/cti

Published

Apr 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62143A Server-Side Request Forgery (SSRF) protection bypass exist…8.3
• CVE-2026-62144An authentication bypass vulnerability in Check Point Securi…9.1
• CVE-2026-62145A vulnerability in Check Point Gaia Portal allows an authent…7.5
• CVE-2026-62146A trust-boundary flaw in CRI-O's sandbox state persistence a…7.8
• CVE-2026-62147The Tempo Operator's gateway component failed to consistentl…6.5
• CVE-2026-6215A weakness has been identified in DbGate up to 7.1.4. The im…6.3
• CVE-2026-62160Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26,…8.7
• CVE-2026-62162Hydra is a layer-two scalability solution for Cardano. Prior…8.2
• CVE-2026-62163Rejected reason: Reason: This candidate is a duplicate of CV…
• CVE-2026-62164Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-62165Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-62166Rejected reason: This CVE is a duplicate of another CVE.