{"vulnerability": "CVE-2026-47668", "sightings": [{"uuid": "96d867b6-a38c-4bec-a435-da6157a261a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mru4zsbvmv27", "content": "A perfect 10 is a perfect excuse to skip patching today.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#InfoSec #ThreatIntel", "creation_timestamp": "2026-07-30T09:32:19.018830Z"}, {"uuid": "efd5f51b-1146-42fc-96c9-92f9ec8713c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/GithubRedTeam/96021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a s-vx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:57:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE in DBGate &lt;= 7.1.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T16:00:03.890894Z"}, {"uuid": "9082b7a4-7bc1-4254-ae32-a7a3122088fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-07-31T22:00:02.868807Z"}, {"uuid": "c3f05522-defa-4eec-9448-34800b36c885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-07-31T22:00:02.723495Z"}, {"uuid": "735fa419-aad9-49c6-adc7-56be87ef63d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-08-01T00:00:11.095502Z"}, {"uuid": "43cbb58d-de47-4212-badf-b537ae5c75cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-08-01T00:00:11.012649Z"}, {"uuid": "20d15068-1da5-4e50-a80d-cc884f0581f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96021", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a s-vx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:57:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE in DBGate &lt;= 7.1.8\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:27.565265Z"}, {"uuid": "ff052514-e4f2-4aed-9cc1-33cfb52dff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-47668.yaml", "content": "", "creation_timestamp": "2026-05-20T13:24:13.000000Z"}, {"uuid": "5252ffec-5ad1-4c9b-b18b-ed2f52183e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/realcodeb0ss/433", "content": "https://www.cve.org/CVERecord?id=CVE-2026-47668\n\n\nFofa : title=\"DbGate\"\n\nShodan : http.title:\"DbGate\"\n\nEnjoy;", "creation_timestamp": "2026-05-24T22:22:53.000000Z"}, {"uuid": "b7af9325-3c3f-4b31-b07e-fd945cf09013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://t.me/GithubRedTeam/85989", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-47668\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 14:47:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDbGate Unauthenticated Remote Code Execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T15:00:05.000000Z"}, {"uuid": "a0bbc157-44d2-4791-b8d8-4d85b0de88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "creation_timestamp": "2026-05-27T21:00:05.000000Z"}, {"uuid": "348841e5-89e1-42bd-af91-61dddfb34a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "creation_timestamp": "2026-05-27T21:06:35.000000Z"}, {"uuid": "7b7d5ef5-3573-420e-be3e-4a58f59c958c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47668", "type": "published-proof-of-concept", "source": "https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc", "content": "", "creation_timestamp": "2026-05-20T09:31:29.000000Z"}, {"uuid": "05727f13-8034-4632-850a-fafc05aaf94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116715316110954921", "content": "\ud83d\udcf0 CVSS 10.0 Flaws in Azure HorizonDB and DbGate Expose Cloud Environments to RCE\n\ud83d\udd25 CRITICAL ALERT: Two CVSS 10.0 vulnerabilities disclosed! \ud83d\udea8 Unauthenticated bypass in Azure HorizonDB (CVE-2026-48567) &amp; RCE in DbGate (CVE-2026-47668) pose extreme risk to cloud environments. Patch and restrict access NOW! #CVE #RCE #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-cvss-10-flaws-azure-horizondb-dbgate-expose-cloud-environments/?u\u2026", "creation_timestamp": "2026-06-08T16:00:04.796830Z"}, {"uuid": "2a55e8af-512e-4854-9ec9-00f9088bb478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47668", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdfw4wqi32r", "content": "CVE-2026-47668 - dbgate-serve\nDbGate's JSON script feature allows unauthorized access to run malicious code on a remote system. This could allow an attacker to take control of the system or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbgateserve #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-07-23T17:56:04.074718Z"}, {"uuid": "f22f04b5-ef60-4730-98e9-51ef74185fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrezp6wm7r2w", "content": "\ud83d\udea8 A CVSS 10.0 vulnerability just dropped. That's as critical as it gets.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-24T09:22:46.483454Z"}, {"uuid": "d40b26ba-15ad-47f3-ac97-f24e848270ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrmpphoxdg2o", "content": "\ud83d\udea8 A CVSS 10.0 vulnerability in a tool you might be using. No, that's not a typo.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-27T10:45:15.559728Z"}, {"uuid": "969db5be-d26c-49da-8050-5dd89c4b884a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrp4fds2lh2j", "content": "CVSS 10.0 isn't a typo. This is the maximum score.\n\nDbGate database manager.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-28T09:37:33.911501Z"}, {"uuid": "3c1f5fe3-f4a2-4eb2-b8d8-ec2834c313cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47668", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrrmxgah7k2n", "content": "CVSS 10.0 is the ceiling. DbGate just proved it can be worse.\n\nDbGate.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-47668-dbgate-unauthenticated-rce-poc/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-07-29T09:39:20.052626Z"}]}