01 Record

CVE-2026-55642

dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)

CriticalPUBLISHEDCNA: GitHub_M

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)

Published

2026-08-20 16:38Z1 DAY AGO

Last updated

2026-08-20 19:31Z1 DAY AGO

Reserved

2026-06-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationpocAutomatableyesTechnical Impacttotal

Data version

5.2

Document digest

271ae17ae6e83fb305839fef8d63470fdb15f32d56c2539f279e26d1d3141de7

VendorProductVersionsPlatforms

t8y2dbx< 0.5.51—