Vulnerabilities

TI-2026-85481 CVE-2026-102523

Authorization bypass in MariaDB server via ALTER TABLE

LOW 38

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00562 Published 2026-11-05 Partial fix · 10.11.19, 11.4.13 +3 CWE-73

TI-2026-82769 CVE-2026-119281 · GHSA-grfq-r75j-rw9x

Non-UTF-8 result charset accepted in MariaDB Connector/J

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00283 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-838

TI-2026-82766 CVE-2026-119280 · GHSA-4jq2-8v3c-97w8

MariaDB Connector/J XA recover trusts server-supplied lengths

LOW 17

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00306 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-20

TI-2026-82765 CVE-2026-119279 · GHSA-797x-p4mc-jwpm

Integer truncation in MariaDB Connector/J length parsing

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00351 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-130

TI-2026-82764 CVE-2026-119278

MariaDB Connector/J crash from rogue server during authentication

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00364 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 CWE-129

TI-2026-82763 CVE-2026-119277

Rogue server can cause out-of-bounds reads in MariaDB Connector/J

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00351 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-125

TI-2026-82762 CVE-2026-119276 · GHSA-h599-m3w5-9m7x

Excessive memory allocation in MariaDB Connector/J OK packet parsing

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00351 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-130

TI-2026-82761 CVE-2026-119210 · GHSA-fhx5-2xqw-2cgm

MariaDB Connector/J regex check lets a server read client files

LOW 26

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00303 Published 2026-10-29 Partial fix · 3.3.7, 3.4.5 +1 CWE-20

TI-2026-75374 CVE-2026-86047

Insufficient quoting in MariaDB mariadb-dump and SHOW commands

LOW 37

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00856 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-89

TI-2026-75369 CVE-2026-85745

Buffer over-read in MariaDB ST_Area with malformed MultiPolygon data

LOW 21

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00534 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-126

TI-2026-75371 CVE-2026-85748

Use-after-free in MariaDB server via many SYS_REFCURSOR objects

MEDIUM 45

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01179 Published 2026-10-16 Fixed in 12.3.3, 13.0.2 CWE-416

TI-2026-75370 CVE-2026-85746

Out-of-bounds write in MariaDB ST_AsText on nested GeometryCollections

MEDIUM 45

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0097 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-787

TI-2026-75372 CVE-2026-92262

Table name encoding bypass in MariaDB server exposes files

MEDIUM 46

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01451 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-706

TI-2026-75368 CVE-2026-97380

MariaDB GRANT PROXY lets attackers set other accounts' passwords

MEDIUM 43

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01303 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-620

TI-2026-75365 CVE-2026-85985

Unauthorized file access in MariaDB CONNECT engine functions

LOW 25

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00452 Published 2026-10-16 Partial fix · 10.6.28, 10.11.19 +4 CWE-862

TI-2026-70113 CVE-2026-107823

Privilege escalation in MariaDB server via crafted view usernames

LOW 35

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00786 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-116

TI-2026-70112 CVE-2026-107822

Privilege escalation in MariaDB via role and user name collision

LOW 31

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00516 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-706

TI-2026-70111 CVE-2026-107821

Insufficient validation of FRM files in MariaDB server

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01202 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-1285

TI-2026-70109 CVE-2026-107819

Cleartext password exposure in MariaDB Connector/C on TLS hostname mismatch

LOW 26

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00346 Published 2026-10-09 Partial fix · 3.4.10 CWE-297

TI-2026-70108 CVE-2026-107818

Environment injection in MariaDB server via wsrep bootstrap file

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00401 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-15

TI-2026-70107 CVE-2026-107817

Out-of-bounds reads in MariaDB server mysql_json plugin

LOW 19

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00151 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-70106 CVE-2026-107816

Out-of-bounds read in MariaDB server qc_info plugin

LOW 28

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00345 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-125

TI-2026-70096 CVE-2026-107815

Out-of-bounds write in MariaDB CONNECT engine DOS tables

MEDIUM 42

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01381 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-787

TI-2026-70086 CVE-2026-107814

Insecure mysql home directory in MariaDB RPM packages

LOW 39

MariaDB server is a community developed fork of MySQL server.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00489 Published 2026-10-09 Partial fix · 10.6.28, 10.11.19 +4 CWE-732

TI-2026-69698 CVE-2026-107385 · GHSA-r3rv-jm3r-62q2

SQL injection in MariaDB Connector/Node.js with NO_BACKSLASH_ESCAPES

LOW 35

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00438 Published 2026-10-08 Fixed in 3.2.5, 3.3.4 +2 CWE-89

Vulnerabilities

Filters