DbGate存在远程代码执行(CVE-2026-47668)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Nxploited/CVE-2026-47668
• https://www.endorlabs.com/vulnerability/cve-2026-47668
• https://pentest-tools.com/vulnerabilities-exploits/dbgate-remote-code-execution-via-anonymous-jwt_29317
• https://www.tenable.com/cve/CVE-2026-47668
• https://t3rry1ng.com/blog/nuclei-poc-2026-05-21
• https://cvemapping.krazeplanet.com/
• https://ddpoc.com/DVB-2026-11070.html

Related Vulnerabilities

• PoCCVE-2026-47670: DbGate - Remote Code Execution via Dynamic Import Bypass
• DbGate /runners/start 代码执行漏洞 （CVE-2026-47668）
• PoCCVE-2026-47668: DbGate - Remote Code Execution via Anonymous JWT
• PoCdbgate-anonymous-access: DbGate Anonymous Access - Detection
• DbGate /runners/load-reader 文件读取漏洞（CVE-2025-50185）
• DbGate /uploads/get 目录遍历漏洞（CVE-2025-50184）
• PoCdbgate-unauth-rce: DbGate Web Client - Unauthenticated Remote Command Execution