CVE-2026-97226

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://vuldb.com/cve/CVE-2026-97226
• https://vuldb.com/submit/908139
• https://vuldb.com/vuln/409320
• https://vuldb.com/vuln/409320/cti

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-97212The WebSocket backend uses charging station identifiers to u…7.3
• CVE-2026-97219The MStore API WordPress plugin before 4.22.1 does not restr…4.3
• CVE-2026-9722The Laiser Tag plugin for WordPress is vulnerable to Cross-S…4.3
• CVE-2026-97222A heap use-after-free flaw was found in Gnumeric. When a use…5.5
• CVE-2026-97224A vulnerability was detected in Excalidraw up to 0.18.1. The…4.3
• CVE-2026-97225A flaw has been found in DbGate up to 7.2.5-beta.5. This aff…6.3
• CVE-2026-97227The NextScripts: Social Networks Auto-Poster WordPress plugi…5.9
• CVE-2026-97228Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer f…2.7
• CVE-2026-97229GitLab has remediated an issue in GitLab CE/EE affecting all…10
• CVE-2026-9723The Google Plus One Bottom plugin for WordPress is vulnerabl…4.3
• CVE-2026-97230IO::Socket::SSL::SelfCertificate versions 1.00 for Perl cont…9.8
• CVE-2026-97231A vulnerability was found in volotat Anagnorisis up to 0.3.1…7.3