Login Request a demo
MA
Product
mariadb-connector-j
by mariadb-corporation · last CVE Oct 29, 2026
11
CVEs
0
On KEV
5.9
Max CVSS
7
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 0Medium 9Low 2
Severity
All severities11Critical0High0Medium9Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mariadb-connector-j to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-119281
New
5.9
0%
Oct 29
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.11
CVE-2026-119279
New
5.9
0%
Oct 29
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.10
CVE-2026-119278
New
5.9
0%
Oct 29
MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5
CVE-2026-119277
New
5.9
0%
Oct 29
MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.11
CVE-2026-119276
New
5.9
0%
Oct 29
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.11
CVE-2026-119210
New
5.9
0%
Oct 29
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.11
CVE-2026-55858
5.9
1%
Aug 28
MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client
Affected: < 2.7.14; >= 3.0.0-alpha, < 3.3.5; >= 3.4.0, < 3.4.3; >= 3.5.0, < 3.5.9
CVE-2026-55857
5.9
0%
Aug 28
MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials
Affected: < 2.7.14; >= 3.0.0, < 3.3.5; >= 3.4.0, < 3.4.3; >= 3.5.0, < 3.5.9
CVE-2026-55856
5.9
0%
Aug 28
MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake
Affected: < 2.7.14; >= 3.0.0, < 3.3.5; >= 3.4.0, < 3.4.3; >= 3.5.0, < 3.5.9
CVE-2026-119280
New
3.7
0%
Oct 29
MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths
Affected: >= 3.0.0, < 3.3.7; >= 3.4.0, < 3.4.5; >= 3.5.0, < 3.5.11
CVE-2026-61700
3.7
0%
Sep 17
MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests
Affected: < 2.7.14; >= 3.0.0, < 3.3.5; >= 3.4.0, < 3.4.3; >= 3.5.0, < 3.5.9
Showing 11