Login Request a demo
SE
Product
server
by MariaDB · last CVE Oct 16, 2026
26
CVEs
0
On KEV
9.9
Max CVSS
16
New 30D
Vulnerabilities26In the news2Timeline
Severity mix
Critical 7High 11Medium 8Low 0
Severity
All severities26Critical7High11Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107822
6.4
1%
Oct 9
MariaDB: database privilege escalation via user / role name collision in the acl cache
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107816
6.4
0%
Oct 9
MariaDB: `qc_info` plugin can do OOB reads if query contains \0
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107819
5.9
0%
Oct 9
MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
Affected: >= 3.4.1, < 3.4.10
CVE-2026-85985
5.4
0%
Oct 16
MariaDB: Unauthorized file access via CONNECT engine UDFs
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44173
5.3
1%
Jun 12
MariaDB: FILE privilege was not checked for subqueries in the FROM clause
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-107817
4.4
0%
Oct 9
MariaDB: mysql_json plugin OOB reads
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-85745
4.3
1%
Oct 16
MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44169
4.3
0%
Jun 12
MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
Affected: >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
Showing 8