How many dataease sqlbot CVEs are in CISA KEV?

None of dataease sqlbot's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of dataease sqlbot are affected?

35 distinct dataease sqlbot versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in dataease sqlbot CVEs?

dataease sqlbot's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-347 (Improper Verification of Cryptographic Signature), CWE-266 (Incorrect Privilege Assignment).

How many critical dataease sqlbot vulnerabilities are there?

dataease sqlbot has 1 critical and 5 high-severity CVEs.

What is the average severity of dataease sqlbot CVEs?

The average CVSS base score across dataease sqlbot's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

dataease

9 CVEs

dataease sqlbot Vulnerabilities

Name: dataease sqlbot vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for sqlbot by dataease.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

9

Public exploits

PoC or exploit code

7.6

Avg CVSS

2026–2026

Last updated May 13, 2026

Overview

dataease sqlbot has 9 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting dataease sqlbot, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of dataease sqlbot's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of dataease sqlbot's CVEs are currently listed in CISA's KEV catalog.

Public exploits

9

9 of dataease sqlbot's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every dataease sqlbot version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.08 CVEs
1.1.08 CVEs
1.1.28 CVEs
1.1.38 CVEs
1.1.48 CVEs
1.2.08 CVEs
1.2.18 CVEs
1.3.08 CVEs
1.4.08 CVEs
1.5.07 CVEs
1.6.04 CVEs
1.02 CVEs
1.12 CVEs
1.22 CVEs
1.32 CVEs
1.41 CVE
1.51 CVE
1.5.11 CVE
1.7.01 CVE

Version ranges

< 1.7.02 CVEs
< 1.5.01 CVE
< 1.6.01 CVE
< 1.7.11 CVE
< 1.8.01 CVE
>= 1.5.01 CVE
>= 1.7.01 CVE

Fixed in

22e66c490fc67f77b94d71dfdb048270e9b6641a3 CVEs
9f891345788465b9593ac6a01af163a26fe0b5092 CVEs
1.5.01 CVE
1.7.01 CVE
39f2203cec4bb4b0aa541710733fe7608e3d3c481 CVE
b2de038e7ada308fe18924b9848f9f15454d5a1b1 CVE
d640ac31d1ce64ce90e06cf7081163915c9fc28c1 CVE
ead7cb36acee41c6105b9613ef81b71c6df8ecac1 CVE
ff98514827bad99b8fa4b39385adecc6e3d443551 CVE

Find a version

9 CVEs

Sort

SQLBot: Unauthorized Access Vulnerability
CVE-2026-42463
Public exploit
Patch
CWE-639
High · CVSS 8.6
EPSS 0.2% (16th pct)2026-05-13
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
CVE-2026-33324
Public exploit
Patch
CWE-89
Critical · CVSS 9.4
EPSS 0.6% (45th pct)2026-05-05
Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery
CVE-2026-5417
Public exploit
Patch
CWE-918
Medium · CVSS 5.1
EPSS 0.2% (12th pct)2026-04-02
SQLBot: RCE via SQL Injection in Excel Upload Endpoint
CVE-2026-32950
Public exploit
Patch
CWE-89
High · CVSS 8.6
EPSS 0.9% (55th pct)2026-03-20
SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL
CVE-2026-32949
Public exploit
Patch
CWE-918
High · CVSS 8.7
EPSS 0.4% (35th pct)2026-03-20
SQLBot: Remote Code Execution via Terminology Poisoning
CVE-2026-32622
Public exploit
Patch
CWE-77
High · CVSS 8.6
EPSS 0.6% (43th pct)2026-03-19
Dataease SQLBot JWT Token auth.py validateEmbedded signature verification
CVE-2025-15598
Public exploit
CWE-347
Medium · CVSS 6.3
EPSS 0.2% (8th pct)2026-03-03
Dataease SQLBot API Endpoint assistant.py access control
CVE-2025-15597
Public exploit
Patch
CWE-266
Medium · CVSS 5.3
EPSS 0.5% (43th pct)2026-03-02
SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability
CVE-2025-69285
Public exploit
Patch
CWE-306
High · CVSS 7.7
EPSS 0.4% (32th pct)2026-01-21

Common weakness types

The CWE weakness categories most often found in dataease sqlbot CVEs. Follow any weakness for its full explanation.

Other dataease products

Browse vulnerabilities for other products by dataease.

dataease92 CVEs io.dataease:dataease-plugin-common7 CVEs io.dataease:common2 CVEs

All dataease vulnerabilities

Frequently asked questions

Common questions about dataease sqlbot vulnerabilities.

How many CVEs does dataease sqlbot have?: dataease sqlbot has 9 published CVE records since 2026.
How many dataease sqlbot CVEs are in CISA KEV?: None of dataease sqlbot's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for dataease sqlbot vulnerabilities?: Yes — 9 of dataease sqlbot's CVEs have a known public exploit.
Which versions of dataease sqlbot are affected?: 35 distinct dataease sqlbot versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in dataease sqlbot CVEs?: dataease sqlbot's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-347 (Improper Verification of Cryptographic Signature), CWE-266 (Incorrect Privilege Assignment).
How many critical dataease sqlbot vulnerabilities are there?: dataease sqlbot has 1 critical and 5 high-severity CVEs.
What is the average severity of dataease sqlbot CVEs?: The average CVSS base score across dataease sqlbot's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track dataease sqlbot vulnerabilities

Monitor new dataease sqlbot vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing