Vulnerabilities

TI-2026-75374 CVE-2026-86047

Insufficient quoting in MariaDB mariadb-dump and SHOW commands

LOW 37

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00856 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-89

TI-2026-75369 CVE-2026-85745

Buffer over-read in MariaDB ST_Area with malformed MultiPolygon data

LOW 21

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00534 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-126

TI-2026-75371 CVE-2026-85748

Use-after-free in MariaDB server via many SYS_REFCURSOR objects

MEDIUM 45

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01179 Published 2026-10-16 Fixed in 12.3.3, 13.0.2 CWE-416

TI-2026-75370 CVE-2026-85746

Out-of-bounds write in MariaDB ST_AsText on nested GeometryCollections

MEDIUM 45

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0097 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-787

TI-2026-75372 CVE-2026-92262

Table name encoding bypass in MariaDB server exposes files

MEDIUM 46

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01451 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-706

TI-2026-75368 CVE-2026-97380

MariaDB GRANT PROXY lets attackers set other accounts' passwords

MEDIUM 43

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01303 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-620

TI-2026-75365 CVE-2026-85985

Unauthorized file access in MariaDB CONNECT engine functions

LOW 25

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00452 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-862

TI-2026-70113 CVE-2026-107823

Privilege escalation in MariaDB server via crafted view usernames

LOW 35

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00786 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-116

TI-2026-70112 CVE-2026-107822

Privilege escalation in MariaDB via role and user name collision

LOW 31

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00516 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-706

TI-2026-70111 CVE-2026-107821

Insufficient validation of FRM files in MariaDB server

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01202 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-1285

TI-2026-70108 CVE-2026-107818

Environment injection in MariaDB server via wsrep bootstrap file

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00401 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-15

TI-2026-70107 CVE-2026-107817

Out-of-bounds reads in MariaDB server mysql_json plugin

LOW 19

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00151 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-70106 CVE-2026-107816

Out-of-bounds read in MariaDB server qc_info plugin

LOW 28

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00345 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-70096 CVE-2026-107815

Out-of-bounds write in MariaDB CONNECT engine DOS tables

MEDIUM 42

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01381 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-787

TI-2026-70086 CVE-2026-107814

Insecure mysql home directory in MariaDB RPM packages

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00489 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-732

TI-2026-35600 CVE-2026-48165

MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

MEDIUM 40

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01506 Published 2026-06-12 Fixed in 10.6.27, 10.11.18 +3 CWE-78

TI-2026-35599 CVE-2026-48163

MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00914 Published 2026-06-12 Fixed in 10.6.27, 10.11.18 +3 CWE-78

TI-2026-32153 CVE-2026-44173

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

LOW 25

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0062 Published 2026-06-12 Fixed in 10.6.26, 10.11.17 +3 CWE-863

TI-2026-32152 CVE-2026-44172

MariaDB: mysql_real_escape_string() incorrectly handled big5

LOW 38

MariaDB server is a community developed fork of MySQL server.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01041 Published 2026-06-12 Fixed CWE-89

TI-2026-32151 CVE-2026-44171

MariaDB: path traversal in mbstream

LOW 35

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00188 Published 2026-06-12 Fixed in 10.6.26, 10.11.17 +3 CWE-22

TI-2026-32149 CVE-2026-44169

MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

LOW 20

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2026-06-12 Fixed in 11.4.11, 11.8.7 +1 CWE-863

TI-2026-32148 CVE-2026-44168

MariaDB: wsrep SST unsafe parameter handling on the donor side

LOW 38

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00588 Published 2026-06-12 Fixed in 10.6.26, 10.11.17 +3 CWE-78

TI-2026-32150 CVE-2026-44170

MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

LOW 33

MariaDB server is a community developed fork of MySQL server.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01334 Published 2026-06-12 Fixed in 10.6.26, 10.11.17 +3 CWE-78

TI-2026-36456 CVE-2026-49261

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

MEDIUM 52

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01582 Published 2026-06-11 Fixed in 10.6.27, 10.11.18 +2 CWE-78

TI-2026-27659 CVE-2026-35549 · GHSA-3xgj-m9hf-j98g

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before…

LOW 28

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00266 Published 2026-04-03 Partial fix · 11.4.10, 11.8.6 +1 CWE-789

Vulnerabilities

Filters