CVE-2026-6216 | DbGate up to 7.1.4 SVG Icon String FontIcon.svelte applicationIcon cross site scripting

A vulnerability categorized as problematic has been discovered in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting.

This vulnerability is traded as CVE-2026-6216. The attack may be launched remotely. Furthermore, there is an exploit available.

It is advisable to upgrade the affected component.