Mariadb vulnerabilities
57 CVEs and advisories name Mariadb as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-102523MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
- CVE-2026-119281MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
- CVE-2026-119280MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths
- CVE-2026-119279MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
- CVE-2026-119278MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication
- CVE-2026-119277MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths
- CVE-2026-119276MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
- CVE-2026-119210MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server…
- CVE-2026-86047MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
- CVE-2026-85745MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
- CVE-2026-85748MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
- CVE-2026-85746MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
- CVE-2026-92262MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
- CVE-2026-97380MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
- CVE-2026-85985MariaDB: Unauthorized file access via CONNECT engine UDFs
- CVE-2026-107823MariaDB: privilege escalation via incorrect view frm parsing
- CVE-2026-107822MariaDB: database privilege escalation via user / role name collision in the acl cache
- CVE-2026-107821MariaDB: insufficient validation of binary frm data when opening a table
- CVE-2026-107819MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
- CVE-2026-107818MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
- CVE-2026-107817MariaDB: mysql_json plugin OOB reads
- CVE-2026-107816MariaDB: `qc_info` plugin can do OOB reads if query contains \0
- CVE-2026-107815MariaDB: one byte OOB write in DOS tables of the CONNECT engine
- CVE-2026-107814MariaDB: Insecure $HOME in MariaDB rpm packages
- CVE-2026-107385MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES
- CVE-2026-107384MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)
- CVE-2026-107383MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters
- CVE-2026-107382MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS
- CVE-2026-61700MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests
- CVE-2026-55860MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)