CVE-2026-6216: DbGate SVG Icon String FontIcon.svelte cross site scripting
A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 7.1.5 mitigates this issue. It is advisable to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DbGateto a version that resolves this vulnerability.Fixed in 7.1.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6216?
CVE-2026-6216 has been classified with a severity that indicates a significant risk of cross site scripting vulnerabilities.
How do I fix CVE-2026-6216?
To fix CVE-2026-6216, you should update DbGate to version 7.1.5 or later.
Which versions of DbGate are affected by CVE-2026-6216?
CVE-2026-6216 affects all versions of DbGate up to and including 7.1.4.
What kind of vulnerability is CVE-2026-6216?
CVE-2026-6216 is a cross site scripting (XSS) vulnerability impacting the SVG Icon String Handler.
What components are involved in CVE-2026-6216?
CVE-2026-6216 involves the FontIcon.svelte file within the DbGate application.