Login Request a demo
SE
Product
server
by MariaDB · last CVE Oct 16, 2026
26
CVEs
0
On KEV
9.9
Max CVSS
16
New 30D
Vulnerabilities26In the news2Timeline
Severity mix
Critical 7High 11Medium 8Low 0
Severity
All severities26Critical7High11Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85748
9.9
1%
Oct 16
MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
Affected: >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-85746
9.9
1%
Oct 16
MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-92262
9.9
1%
Oct 16
MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-32710
9.9
1%
Mar 20
Heap-based Buffer Overflow in MariaDB
Affected: >= 11.4.1, < 11.4.10; >= 11.8.1, < 11.8.6; >= 12.1.2, < 12.2.2
CVE-2026-44170
9.8
1%
Jun 12
MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-49261
9.8
2%
Jun 11
MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; = 12.3.1
CVE-2026-44172
9.1
1%
Jun 12
MariaDB: mysql_real_escape_string() incorrectly handled big5
Affected: = 3.3.18; = 3.4.8
Showing 7