CVE-2026-6215 | DbGate up to 7.1.4 REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery

A vulnerability was found in DbGate up to 7.1.4. It has been rated as critical. The impacted element is the function apiServerUrl1 of the file packages/rest/src/openApiDriver.ts of the component REST/GraphQL. This manipulation causes server-side request forgery.

This vulnerability appears as CVE-2026-6215. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.