- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, SQLBot recorded 6 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of SQLBot and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121453SQLBot through 1.10.3 Path Traversal via datasource importToDb EndpointCVE-2026-93660SQLBot through 1.10.1 Improper Access Control via Dashboard UpdateCVE-2026-53557SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command ExecutionCVE-2026-53556SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File ReadCVE-2026-53555Stored XSS via SVG Upload| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-121453SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-93660SQLBot through 1.10.1 Improper Access Control via Dashboard Update | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-53557SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution | Exploitation statusNot exploited | FixYes | Published09/17/2026 | SeverityHigh |
|---|
CVE-2026-53556SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityMedium |
|---|
CVE-2026-53555Stored XSS via SVG Upload | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityMedium |
|---|
CVE-2026-53554SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing | Exploitation statusActively exploited | FixYes | Published09/17/2026 | SeverityHigh |
|---|
CVE-2026-72743SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html | Exploitation statusActively exploited | FixYes | Published08/10/2026 | SeverityMedium |
|---|
CVE-2026-42463SQLBot: Unauthorized Access Vulnerability | Exploitation statusActively exploited | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-33324SQLBot prompt injection allows arbitrary SQL execution and remote code execution | Exploitation statusActively exploited | FixYes | Published05/05/2026 | SeverityCritical |
|---|
CVE-2026-5417Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery | Exploitation statusActively exploited | FixYes | Published04/02/2026 | SeverityMedium |
|---|
CVE-2026-32950SQLBot: RCE via SQL Injection in Excel Upload Endpoint | Exploitation statusActively exploited | FixYes | Published03/20/2026 | SeverityHigh |
|---|
CVE-2026-32949SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL | Exploitation statusActively exploited | FixYes | Published03/20/2026 | SeverityHigh |
|---|
CVE-2026-32622SQLBot: Remote Code Execution via Terminology Poisoning | Exploitation statusActively exploited | FixYes | Published03/19/2026 | SeverityHigh |
|---|
CVE-2025-15598Dataease SQLBot JWT Token auth.py validateEmbedded signature verification | Exploitation statusActively exploited | FixNo | Published03/03/2026 | SeverityMedium |
|---|
CVE-2025-15597Dataease SQLBot API Endpoint assistant.py access control | Exploitation statusActively exploited | FixYes | Published03/02/2026 | SeverityMedium |
|---|
CVE-2025-69285SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability | Exploitation statusActively exploited | FixYes | Published01/21/2026 | SeverityHigh |
|---|
16 Results | Page 1 of 1