Login Request a demo
SE
Product
server
by MariaDB · last CVE Oct 16, 2026
25
CVEs
0
On KEV
9.9
Max CVSS
16
New 30D
Vulnerabilities25In the news2Timeline
Severity mix
Critical 6High 11Medium 8Low 0
Severity
All severities25Critical6High11Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85748
9.9
1%
Oct 16
MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
Affected: >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-85746
9.9
1%
Oct 16
MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-92262
9.9
1%
Oct 16
MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44170
9.8
1%
Jun 12
MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-49261
9.8
2%
Jun 11
MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; = 12.3.1
CVE-2026-44172
9.1
1%
Jun 12
MariaDB: mysql_real_escape_string() incorrectly handled big5
Affected: = 3.3.18; = 3.4.8
CVE-2026-97380
8.8
1%
Oct 16
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107815
8.5
1%
Oct 9
MariaDB: one byte OOB write in DOS tables of the CONNECT engine
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107818
8.4
0%
Oct 9
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107814
8.4
0%
Oct 9
MariaDB: Insecure $HOME in MariaDB rpm packages
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107821
8.0
1%
Oct 9
MariaDB: insufficient validation of binary frm data when opening a table
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44168
8.0
1%
Jun 12
MariaDB: wsrep SST unsafe parameter handling on the donor side
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-44171
7.8
0%
Jun 12
MariaDB: path traversal in mbstream
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-86047
7.7
1%
Oct 16
MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107823
7.2
1%
Oct 9
MariaDB: privilege escalation via incorrect view frm parsing
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-48165
7.2
2%
Jun 12
MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; >= 12.3.1, < 12.3.2
CVE-2026-48163
7.2
1%
Jun 12
MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; >= 12.3.1, < 12.3.2
CVE-2026-107822
6.4
1%
Oct 9
MariaDB: database privilege escalation via user / role name collision in the acl cache
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107816
6.4
0%
Oct 9
MariaDB: `qc_info` plugin can do OOB reads if query contains \0
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107819
5.9
0%
Oct 9
MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
Affected: >= 3.4.1, < 3.4.10
CVE-2026-85985
5.4
0%
Oct 16
MariaDB: Unauthorized file access via CONNECT engine UDFs
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44173
5.3
1%
Jun 12
MariaDB: FILE privilege was not checked for subqueries in the FROM clause
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-107817
4.4
0%
Oct 9
MariaDB: mysql_json plugin OOB reads
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-85745
4.3
1%
Oct 16
MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44169
4.3
0%
Jun 12
MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
Affected: >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
Showing 25