Login Request a demo
SQ
Product
SQLbot
by dataease · last CVE Sep 18, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 7Medium 8Low 0
Severity
All severities15Critical0High7Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SQLbot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93660
6.5
0%
Sep 18
SQLBot through 1.10.1 Improper Access Control via Dashboard Update
Affected: through 1.10.1
CVE-2025-15597
6.3
1%
Mar 2
Dataease SQLBot API Endpoint assistant.py access control
Affected: 1.0; 1.1; 1.2; 1.3; 1.4.0
CVE-2025-69285
6.1
0%
Jan 21
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
Affected: < 1.5.0
CVE-2026-53556
6.0
0%
Sep 17
SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Read
Affected: < 1.9.0
CVE-2025-15598
5.9
0%
Mar 3
Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
Affected: 1.5.0; 1.5.1
CVE-2026-72743
5.4
0%
Aug 10
SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
Affected: through 1.10.0
CVE-2026-53555
5.1
0%
Sep 17
Stored XSS via SVG Upload
Affected: < 1.9.0
CVE-2026-5417
4.7
0%
Apr 2
Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +1 more
Showing 8