GCVE - cpe:2.3:a:mariadb:server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mariadb (`7f603b14-ed39-5458-877b-2a349be64aa8`)
Product	Server (`dd69a5ac-026d-57dd-8ee1-83aeea5ff9a5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-49261`	vulnerable	2026-07-29 00:57:45.321919	MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` CRITICAL (10) MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`. Published: 2026-06-11T17:13:20.776Z Updated: 2026-08-12T12:04:47.070Z Open on db.gcve.eu Reference links https://github.com/MariaDB/server/security/advisories/GHSA-3p3m-4x7c-p4pw https://jira.mariadb.org/browse/MDEV-39721	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48165`	vulnerable	2026-07-29 00:55:01.127230	MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side HIGH (8) MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. Published: 2026-06-12T17:35:16.918Z Updated: 2026-08-03T12:05:49.897Z Open on db.gcve.eu Reference links https://github.com/MariaDB/server/security/advisories/GHSA-7v3p-h23x-8hwv https://jira.mariadb.org/browse/MDEV-39676	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48163`	vulnerable	2026-07-29 00:55:01.126898	MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) HIGH (8) MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the rsync SST method. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. Published: 2026-06-12T17:34:57.923Z Updated: 2026-08-03T12:05:46.876Z Open on db.gcve.eu Reference links https://github.com/MariaDB/server/security/advisories/GHSA-rpgv-q6gv-684r https://jira.mariadb.org/browse/MDEV-39648	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44173`	vulnerable	2026-07-29 00:52:14.075761	MariaDB: FILE privilege was not checked for subqueries in the FROM clause MEDIUM (5) MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2. Published: 2026-06-12T17:34:30.301Z Updated: 2026-08-03T12:06:06.566Z Open on db.gcve.eu Reference links https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc https://jira.mariadb.org/browse/MDEV-39493	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44172`	vulnerable	2026-07-29 00:52:14.075637	MariaDB: mysql_real_escape_string() incorrectly handled big5 MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9. Published: 2026-06-12T17:34:04.487Z Updated: 2026-07-30T12:04:56.718Z Open on db.gcve.eu Reference links https://github.com/MariaDB/server/security/advisories/GHSA-pv9p-5w55-55jm https://jira.mariadb.org/browse/CONC-819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44171`	vulnerable	2026-07-29 00:52:14.075516	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44170`	vulnerable	2026-07-29 00:52:14.075250	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44169`	vulnerable	2026-07-29 00:52:14.075111	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-44168`	vulnerable	2026-07-29 00:52:14.074924	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32710`	vulnerable	2026-06-08 07:57:18.064212	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.