mariadb

144 results · Feed

• Medium 5.4
  CVE-2026-85985

  MariaDB: Unauthorized file access via CONNECT engine UDFs

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affect…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 16, 2026
• High 7.2
  CVE-2026-107823

  MariaDB: privilege escalation via incorrect view frm parsing

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• Medium 6.4
  CVE-2026-107822

  MariaDB: database privilege escalation via user / role name collision in the acl cache

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched bec…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.0
  CVE-2026-107821 Public exploit

  MariaDB: insufficient validation of binary frm data when opening a table

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• Medium 5.9
  CVE-2026-107819

  MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

  MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but …

  MariaDB server mariadb Ubuntu
  Oct 9, 2026
• High 8.4
  CVE-2026-107818

  MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE priv…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• Medium 4.4
  CVE-2026-107817

  MariaDB: mysql_json plugin OOB reads

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• Medium 6.4
  CVE-2026-107816

  MariaDB: `qc_info` plugin can do OOB reads if query contains \0

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.5
  CVE-2026-107815

  MariaDB: one byte OOB write in DOS tables of the CONNECT engine

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack bu…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.4
  CVE-2026-107814

  MariaDB: Insecure $HOME in MariaDB rpm packages

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

  MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  Oct 9, 2026
• Medium 6.5
  CVE-2026-61109

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions …

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu Azure Linux
  Jul 21, 2026
• Low 2.9
  CVE-2026-61096

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 7.2
  CVE-2026-61094

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Low 2.7
  CVE-2026-61081

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Suppo…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Azure Linux Alpine
  Jul 21, 2026
• Medium 6.2
  CVE-2026-60747

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 6.6
  CVE-2026-60585

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 6.4
  CVE-2026-60332

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Su…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 6.4
  CVE-2026-60331

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• High 8.2
  CVE-2026-60315

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versi…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 7.2
  CVE-2026-60316

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versi…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.1
  CVE-2026-60191

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Low 2.2
  CVE-2026-60190

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60188

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60187

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60189

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60185

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60186

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 6.4
  CVE-2026-60183

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported v…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60182

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported v…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60184

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 6.6
  CVE-2026-60178

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported v…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60177

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported v…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 8.4
  CVE-2026-60163

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.9
  CVE-2026-60145

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 6.5
  CVE-2026-47064

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.9
  CVE-2026-47052

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that a…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.9
  CVE-2026-47023

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 4.4
  CVE-2026-47012

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• Medium 4.4
  CVE-2026-46936

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions t…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 7.5
  CVE-2026-46862

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are aff…

  Oracle MySQL Router percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jun 16, 2026