{"metadata": {"vulnerability": "CVE-2026-61742", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-24T04:25:42Z", "date_only": false, "value": "2026-06-24T04:25:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "ae9742ba-dbc6-4b03-8779-f49381c57423", "url": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-10T18:59:00.047Z", "date_only": false, "value": "2026-07-10T18:59:00.047Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-61742", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T17:42:02.587Z", "date_only": false, "value": "2026-09-24T17:42:02.587147Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61742", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T17:42:02.587Z", "date_only": false, "value": "2026-09-24T17:42:02.587147Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61742", "record": "FKIE_CVE-2026-61742", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T17:42:27.772Z", "date_only": false, "value": "2026-09-24T17:42:27.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-24T17:42:27.772Z", "date_only": false, "value": "2026-09-24T17:42:27.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-61742", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T18:17:16Z", "date_only": false, "value": "2026-09-24T18:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FM8P-53WW-HF6W", "record": "GHSA-FM8P-53WW-HF6W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T18:17:16.173Z", "date_only": false, "value": "2026-09-24T18:17:16.173", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61742", "record": "FKIE_CVE-2026-61742", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T19:15:18.881Z", "date_only": false, "value": "2026-09-24T19:15:18.881041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwbxptij6i2n", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "82ee6216-f22b-40cc-9faf-28707a8afd7a", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-61742: DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite\nCVSS 9.3\nhttps://beta.vulnsea.com/cve/CVE-2026-61742\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mwbxptij6i2n"}, {"timestamp": "2026-09-24T19:20:08.355Z", "date_only": false, "value": "2026-09-24T19:20:08.355085Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbxyhqcmy2r", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "1b1e3204-170d-45f7-bf7e-dd82ba773fe2", "content": "CVE-2026-61742 - dbhub\nIf you run DBHub using its built\u2011in HTTP server (for example with --transport http --port 8080) before version 0.22.5, a malicious website can trick a visitor\u2019s browser into sending\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dbhub #bytebase #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbxyhqcmy2r"}, {"timestamp": "2026-09-24T19:36:57Z", "date_only": false, "value": "2026-09-24T19:36:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FM8P-53WW-HF6W", "record": "GHSA-FM8P-53WW-HF6W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T19:36:57Z", "date_only": false, "value": "2026-09-24T19:36:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FM8P-53WW-HF6W", "record": "GHSA-FM8P-53WW-HF6W", "field": "modified"}, {"timestamp": "2026-09-24T20:08:10.081Z", "date_only": false, "value": "2026-09-24T20:08:10.081999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2odqubi2n", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "ee3e1f65-d06b-4226-ab88-bd5dc945e471", "content": "\ud83d\udea8 CVE-2026-61742 \u2014 CVSS 9.3 CRITICAL\n\nDBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61742\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2odqubi2n"}, {"timestamp": "2026-09-25T13:30:32Z", "date_only": false, "value": "2026-09-25T13:30:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/578cc93d0032ecb85c4eb5d7e0d82616", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "119c2613-eaeb-4e57-8ec5-12e7d6e6c2a2", "content": "# CVE-2026-61742: CVE-2026-61742: DNS Rebinding to Unauthenticated SQL Execution in DBHub\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-09-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61742\n\n## Summary\nA critical DNS rebinding vulnerability in DBHub (associated with GHSA-fm8p-53ww-hf6w) allows unauthenticated remote attackers to execute arbitrary SQL queries against local and internal databases. By exploiting a relative origin validation check within the HTTP transport middleware, an attacker can bypass same-origin protections via DNS rebinding. This allows malicious external websites to send JSON-RPC commands to the local DBHub service to read, write, and exfiltrate database contents. The issue affects all versions of DBHub prior to 0.22.5.\n\n## TL;DR\nUnauthenticated remote SQL execution on local DBHub database servers via client-side DNS rebinding.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-346\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 9.3\n- **EPSS Score**: N/A (Published 2026)\n- **Impact**: Unauthenticated arbitrary SQL Execution / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- @bytebase/dbhub\n- DBHub Server (HTTP transport mode)\n- **@bytebase/dbhub**: < 0.22.5 (Fixed in: `0.22.5`)\n\n## Mitigation\n\n- Upgrade DBHub to version 0.22.5 or above to apply strict host allowlisting.\n- Restrict service binding explicitly to loopback interface 127.0.0.1 instead of wildcard interfaces 0.0.0.0.\n- Deploy a reverse proxy (e.g., Nginx, Apache, or Caddy) in front of the HTTP endpoint to enforce authentication and validate host headers.\n\n**Remediation Steps:**\n1. Run 'npm install @bytebase/dbhub@latest' to update the package dependency.\n2. Verify the version is at least 0.22.5 by inspecting the package-lock.json or running 'npx @bytebase/dbhub --version'.\n3. If configuration overrides are needed, pass the authorized domain names via the '--allowed-hosts' CLI argument or the 'DBHUB_ALLOWED_HOSTS' environment variable.\n\n## References\n\n- [GitHub Security Advisory GHSA-fm8p-53ww-hf6w](https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w)\n- [NVD CVE-2026-61742 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-61742)\n- [DBHub v0.22.6 Release Notes](https://github.com/bytebase/dbhub/releases/tag/v0.22.6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61742) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/578cc93d0032ecb85c4eb5d7e0d82616"}, {"timestamp": "2026-09-30T17:32:07.107Z", "date_only": false, "value": "2026-09-30T17:32:07.107", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-61742", "record": "FKIE_CVE-2026-61742", "field": "lastModified"}], "metrics": {"as_of": "2026-10-30T08:35:21.192Z", "anchors": {"origin": {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-06-24T04:25:42Z", "date_only": false, "value": "2026-06-24T04:25:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "ae9742ba-dbc6-4b03-8779-f49381c57423", "url": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -7995869.283, "hours": -2221.0748008333335, "days": -92.54478336805555, "min_seconds": -7995869.283, "max_seconds": -7995869.283, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-24T04:25:42Z", "date_only": false, "value": "2026-06-24T04:25:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "ae9742ba-dbc6-4b03-8779-f49381c57423", "url": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3078309.909003, "hours": 855.0860858341666, "days": 35.62858690975694, "min_seconds": 3078309.909003, "max_seconds": 3078309.909003, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T17:30:11.283Z", "date_only": false, "value": "2026-09-24T17:30:11.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-61742", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T08:35:21.192Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 11074179.192003, "hours": 3076.1608866675, "days": 128.1733702778125, "min_seconds": 11074179.192003, "max_seconds": 11074179.192003, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-24T04:25:42Z", "date_only": false, "value": "2026-06-24T04:25:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "record": "CVE-2026-61742", "field": "creation_timestamp", "uuid": "ae9742ba-dbc6-4b03-8779-f49381c57423", "url": "https://github.com/bytebase/dbhub/security/advisories/GHSA-fm8p-53ww-hf6w", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T08:35:21.192Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}