IA Squad
SearchPT

dbgate-serve

js · dbgate-serveCritical

DbGate JSON script runner endpoint vulnerable to remote code execution

The POST /runners/start endpoint in DbGate's JSON script runner allows remote code execution via code injection in the functionNam

09 Jun 2026 · act now