Skip to content
OpenAdvisories
High WID-SEC-2026-4018 7 CVEs

MariaDB: Mehrere Schwachstellen

Published Oct 18, 2026 · Updated Nov 9, 2026 · Revision 6 · de

Vendor: amazon Vendor: MariaDB Vendor: Red Hat Vendor: SUSE Product: Enterprise Linux Product: Linux 2 Product: MariaDB Product: openSUSE Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um beliebigen Programmcode auszuführen, SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

MariaDB ist ein relationales Datenbanksystem, das anwendungskompatibel mit MySQL ist.

Vulnerabilities 7

  • Critical 9.9
    CVE-2026-85746

    MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive W…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Critical 9.9
    CVE-2026-85748

    MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

    MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large …

    MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  • Critical 9.9
    CVE-2026-92262 Public exploit

    MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encod…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.8
    CVE-2026-97380

    MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, c…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux
  • High 7.7
    CVE-2026-86047

    MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 5.4
    CVE-2026-85985

    MariaDB: Unauthorized file access via CONNECT engine UDFs

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affect…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 4.3
    CVE-2026-85745

    MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser a…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

Revision history

  1. #6

    Neue Updates von Amazon aufgenommen

  2. #5

    Neue Updates von openSUSE aufgenommen

  3. #4

    Neue Updates von Red Hat aufgenommen

  4. #3

    Neue Updates von Red Hat aufgenommen

  5. #2

    Neue Updates von Red Hat aufgenommen

  6. #1

    Initiale Fassung

References