Product by 1Panel-dev

    SQLBot

    8 known vulnerabilities in SQLBot (1Panel-dev), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SQLBot (1Panel-dev)
    HighCVE-2026-32950

    SQLBot: RCE via SQL Injection in Excel Upload Endpoint

    also in 1 other product

    8.8
    CriticalCVE-2026-33324

    SQLBot prompt injection allows arbitrary SQL execution and remote code execution

    also in 1 other product

    8.8
    HighCVE-2026-32622

    SQLBot: Remote Code Execution via Terminology Poisoning

    also in 1 other product

    8.8
    HighCVE-2026-32949

    SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL

    also in 1 other product

    7.5
    MediumCVE-2025-15597

    Dataease SQLBot API Endpoint assistant.py access control

    also in 1 other product

    6.3
    HighCVE-2025-69285

    SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability

    also in 1 other product

    6.1
    HighCVE-2026-42463

    SQLBot: Unauthorized Access Vulnerability

    also in 1 other product

    8.1
    MediumCVE-2025-15598

    Dataease SQLBot JWT Token auth.py validateEmbedded signature verification

    also in 1 other product

    3.7

    All products by 1Panel-dev