MariaDB

Products

Exploited and recent CVEs

• CVE-2026-102523 High 8.0 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION 0.6%
• CVE-2026-86047 High 7.7 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands 0.9%
• CVE-2026-85745 Medium 4.3 MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. 0.5%
• CVE-2026-85748 Critical 9.9 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's 1.2%
• CVE-2026-85746 Critical 9.9 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 1.0%
• CVE-2026-92262 Critical 9.9 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 1.5%
• CVE-2026-97380 High 8.8 MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges 1.3%
• CVE-2026-85985 Medium 5.4 MariaDB: Unauthorized file access via CONNECT engine UDFs 0.5%
• CVE-2026-107823 High 7.2 MariaDB: privilege escalation via incorrect view frm parsing 0.8%
• CVE-2026-107822 Medium 6.4 MariaDB: database privilege escalation via user / role name collision in the acl cache 0.5%
• CVE-2026-107821 High 8.0 MariaDB: insufficient validation of binary frm data when opening a table 1.2%
• CVE-2026-107819 Medium 5.9 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure 0.3%
• CVE-2026-107818 High 8.4 MariaDB: environment injection via wsrep bootstrap in the mariadb.service file 0.4%
• CVE-2026-107817 Medium 4.4 MariaDB: mysql_json plugin OOB reads 0.2%
• CVE-2026-107816 Medium 6.4 MariaDB: `qc_info` plugin can do OOB reads if query contains \0 0.3%
• CVE-2026-107815 High 8.5 MariaDB: one byte OOB write in DOS tables of the CONNECT engine 1.4%
• CVE-2026-107814 High 8.4 MariaDB: Insecure $HOME in MariaDB rpm packages 0.5%
• CVE-2026-48165 High 8.0 MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side 1.5%
• CVE-2026-48163 High 8.0 MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) 0.9%
• CVE-2026-44173 Medium 5.0 MariaDB: FILE privilege was not checked for subqueries in the FROM clause 0.6%
• CVE-2026-44172 Critical 9.1 MariaDB: mysql_real_escape_string() incorrectly handled big5 1.0%
• CVE-2026-44171 Medium 6.3 MariaDB: path traversal in mbstream 0.2%
• CVE-2026-44169 Medium 4.3 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions 0.2%
• CVE-2026-44168 High 8.0 MariaDB: wsrep SST unsafe parameter handling on the donor side 0.6%
• CVE-2026-44170 Critical 9.9 MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL 1.3%
• CVE-2026-49261 Critical 10.0 MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` 1.6%
• CVE-2026-35549 Medium 6.5 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user ac 0.3%
• CVE-2026-32710 High 8.6 Heap-based Buffer Overflow in MariaDB 0.9%
• CVE-2025-13699 High 7.0 MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability 0.5%
• CVE-2023-52969 Medium 4.9 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and 0.5%