Skip to content

CVE-2026-47668

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 6, 2026
Last Seen
June 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

DbGate's JSON script runner has a critical vulnerability (CVE-2026-47668) that allows unauthenticated remote code execution via the functionName parameter in JSON script assign commands. The vulnerability arises from direct string concatenation of user-controlled values into dynamically generated Ja...

Public Exploits

Checking GitHub for proof-of-concept code…