VulnSocial

CVE-2026-47670Disclosure

LOWCVSS 9.4 · CRITICAL

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

DbGate is cross-platform database manager. Versions 7.1.8 and prior are vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials can execute arbitrary OS commands as root by exploiting an unsanitized `functionName` parameter in the `/runners/load-reader` endpoint. The `require = null` mitigation is trivially bypassed via dynamic `import()`. Version 7.1.9 contains a patch.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-06-15)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-05: 1Mentions · 2026-06-15: 2PoC Mentioned / Linked · 2026-06-15: 1Patch / Workaround · 2026-06-05: 1Technical Details · 2026-06-05: 1Technical Details · 2026-06-15: 206-0506-15
Signal classification1 categories
Disclosure
3100.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-051
Disclosure1
2026-06-152
Disclosure2
Full discourse3 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-47670 - critical 🚨 DbGate - Remote Code Execution via Dynamic Import Bypass > DbGate versions <= 7.1.8 are vulnerable to authenticated remote code execution via th... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-47670 @pdnuclei #NucleiTemplates #cve

    Post summary

    The post announces a critical CVE-2026-47670 affecting DbGate versions 7.1.8 and below, highlighting a remote code execution vulnerability via dynamic import bypass. It references a library page for further details.

    00031158
    1.2K followersView on X
  • Halil Deniz@denizhalilT
    Disclosure

    🚨 New Vulnerability Analysis: CVE-2026-47670 🚨 Can a standard ECMAScript language feature completely break an intentional security sandbox? here: 👉 https://denizhalil.com/2026/06/15/cve-2026-47670-dbgate-rce-bypass/ #Cybersecurity #Infosec #NodeJS #VulnerabilityResearch #ApplicationSecurity #RCE https://t.co/q755PPzZx0

    Post summary

    The tweet announces a newly analyzed vulnerability (CVE-2026-47670) that enables RCE bypass using a JavaScript language feature, but does not provide exploits, active exploitation evidence, or patch information.

    0000054
    31 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨 Multiple Critical Vulnerabilities Disclosed in DbGate Several severe vulnerabilities in DbGate can allow attackers to achieve remote code execution: • CVE-2026-47668 - Unauthenticated RCE via JSON Script Runner (dbgate-serve) • CVE-2026-47669 - Zip Slip arbitrary file write leading to RCE • CVE-2026-47670 - Authenticated RCE via functionName injection (dbgate-api) 👉 Affected: DbGate <= 7.1.8 ✅ Fix: Upgrade to 7.1.9 or later

    Post summary

    Multiple CVEs in DbGate enabling remote code execution have been disclosed, with an upgrade to 7.1.9 or later recommended to remediate them.

    0000060
    207 followersView on X

Explore more

Back to dashboard