Mariadb - vulnerabilities (CVEs)

439 CVEs in 5 products, 16 in the last 30 days, newest from 2026-10-16.

Products

Mariadb - 431 CVEs
Server - 26 CVEs
Connector/c - 1 CVEs
Maxscale - 1 CVEs
Model Context Protocol - 1 CVEs

Newest CVEs of Mariadb

CVE-2026-86047 - CVSS 7.7 (high), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER,…
CVE-2026-85745 - CVSS 4.3 (medium), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond…
CVE-2026-85748 - CVSS 9.9 (critical), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array…
CVE-2026-85746 - CVSS 9.9 (critical), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write…
CVE-2026-92262 - CVSS 9.9 (critical), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass…
CVE-2026-97380 - CVSS 8.8 (high), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY…
CVE-2026-85985 - CVSS 5.4 (medium), 2026-10-16: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine…
CVE-2026-107823 - CVSS 7.2 (high), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM…
CVE-2026-107822 - CVSS 6.4 (medium), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache…
CVE-2026-107821 - CVSS 8 (high), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently…
CVE-2026-107819 - CVSS 5.9 (medium), 2026-10-09: MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C…
CVE-2026-107818 - CVSS 8.4 (high), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service…
CVE-2026-107817 - CVSS 4.4 (medium), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin…
CVE-2026-107816 - CVSS 6.4 (medium), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin…
CVE-2026-107815 - CVSS 8.5 (high), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's…
CVE-2026-107814 - CVSS 8.4 (high), 2026-10-09: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages…
CVE-2026-48165 - CVSS 9.1 (critical), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12,…
CVE-2026-48163 - CVSS 9.1 (critical), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12,…
CVE-2026-44173 - CVSS 8.1 (high), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11,…
CVE-2026-44172 - CVSS 9.1 (critical), 2026-06-12: MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping…
CVE-2026-44170 - CVSS 9.9 (critical), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11,…
CVE-2026-44169 - CVSS 4.3 (medium), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting…
CVE-2026-44168 - CVSS 8 (high), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11,…
CVE-2026-44171 - CVSS 7.8 (high), 2026-06-12: MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11,…
CVE-2026-49261 - CVSS 10 (critical), 2026-06-11: MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1…
CVE-2026-35549 - CVSS 6.5 (medium), 2026-04-03: An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password…
CVE-2026-32710 - CVSS 9.9 (critical), 2026-03-20: MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via…
CVE-2026-3494 - CVSS 5.3 (medium), 2026-03-03: In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or…
CVE-2025-13699 - CVSS 7 (high), 2025-12-23: MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2025-56404 - CVSS 7.5 (high), 2025-09-10: An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.