CVE-2026-97226
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Sep 24, 2026
Vendor
unknown
Description
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.