# cve.now: Mariadb

The newest entries naming Mariadb as an affected vendor (up to 200), of 57 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-102523](https://cve.now/CVE-2026-102523.md): MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION (CVSS 8.0)
- [CVE-2026-119281](https://cve.now/CVE-2026-119281.md): MariaDB Connector/J: Server could switch character\_set\_results away from UTF-8 without the client noticing (CVSS 5.9)
- [CVE-2026-119280](https://cve.now/CVE-2026-119280.md): MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths (CVSS 3.7)
- [CVE-2026-119279](https://cve.now/CVE-2026-119279.md): MariaDB Connector/J: Length-encoded integers larger than Integer.MAX\_VALUE were truncated before being used as lengths (CVSS 5.9)
- [CVE-2026-119278](https://cve.now/CVE-2026-119278.md): MariaDB Connector/J: Rogue server can crash the client during caching\_sha2\_password authentication (CVSS 5.9)
- [CVE-2026-119277](https://cve.now/CVE-2026-119277.md): MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths (CVSS 5.9)
- [CVE-2026-119276](https://cve.now/CVE-2026-119276.md): MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets (CVSS 5.9)
- [CVE-2026-119210](https://cve.now/CVE-2026-119210.md): MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server… (CVSS 5.9)
- [CVE-2026-86047](https://cve.now/CVE-2026-86047.md): MariaDB: Insufficient quoting in mariadb-dump and SHOW commands (CVSS 7.7)
- [CVE-2026-85745](https://cve.now/CVE-2026-85745.md): MariaDB: Out-of-bound buffer read on in \`ST\_Area\` of a multipolygon. (CVSS 4.3)
- [CVE-2026-85748](https://cve.now/CVE-2026-85748.md): MariaDB: Use-after-free with a large number of SYS\_REFCURSOR's (CVSS 9.9)
- [CVE-2026-85746](https://cve.now/CVE-2026-85746.md): MariaDB: Out-of-bound buffer write on in \`ST\_AsText\` of nested GeometryCollections (CVSS 9.9)
- [CVE-2026-92262](https://cve.now/CVE-2026-92262.md): MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. (CVSS 9.9)
- [CVE-2026-97380](https://cve.now/CVE-2026-97380.md): MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges (CVSS 8.8)
- [CVE-2026-85985](https://cve.now/CVE-2026-85985.md): MariaDB: Unauthorized file access via CONNECT engine UDFs (CVSS 5.4)
- [CVE-2026-107823](https://cve.now/CVE-2026-107823.md): MariaDB: privilege escalation via incorrect view frm parsing (CVSS 7.2)
- [CVE-2026-107822](https://cve.now/CVE-2026-107822.md): MariaDB: database privilege escalation via user / role name collision in the acl cache (CVSS 6.4)
- [CVE-2026-107821](https://cve.now/CVE-2026-107821.md): MariaDB: insufficient validation of binary frm data when opening a table (CVSS 8.0)
- [CVE-2026-107819](https://cve.now/CVE-2026-107819.md): MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure (CVSS 5.9)
- [CVE-2026-107818](https://cve.now/CVE-2026-107818.md): MariaDB: environment injection via wsrep bootstrap in the mariadb.service file (CVSS 8.4)
- [CVE-2026-107817](https://cve.now/CVE-2026-107817.md): MariaDB: mysql\_json plugin OOB reads (CVSS 4.4)
- [CVE-2026-107816](https://cve.now/CVE-2026-107816.md): MariaDB: \`qc\_info\` plugin can do OOB reads if query contains \\0 (CVSS 6.4)
- [CVE-2026-107815](https://cve.now/CVE-2026-107815.md): MariaDB: one byte OOB write in DOS tables of the CONNECT engine (CVSS 8.5)
- [CVE-2026-107814](https://cve.now/CVE-2026-107814.md): MariaDB: Insecure $HOME in MariaDB rpm packages (CVSS 8.4)
- [CVE-2026-107385](https://cve.now/CVE-2026-107385.md): MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO\_BACKSLASH\_ESCAPES (CVSS 7.4)
- [CVE-2026-107384](https://cve.now/CVE-2026-107384.md): MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) (CVSS 8.1)
- [CVE-2026-107383](https://cve.now/CVE-2026-107383.md): MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters (CVSS 7.5)
- [CVE-2026-107382](https://cve.now/CVE-2026-107382.md): MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS (CVSS 5.9)
- [CVE-2026-61700](https://cve.now/CVE-2026-61700.md): MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests (CVSS 3.7)
- [CVE-2026-55860](https://cve.now/CVE-2026-55860.md): MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport) (CVSS 5.9)
- [CVE-2026-55859](https://cve.now/CVE-2026-55859.md): MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb (CVSS 5.9)
- [CVE-2026-55858](https://cve.now/CVE-2026-55858.md): MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client (CVSS 5.9)
- [CVE-2026-55857](https://cve.now/CVE-2026-55857.md): MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials (CVSS 5.9)
- [CVE-2026-55856](https://cve.now/CVE-2026-55856.md): MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake (CVSS 5.9)
- [CVE-2026-55855](https://cve.now/CVE-2026-55855.md): MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets (CVSS 6.5)
- [CVE-2026-55854](https://cve.now/CVE-2026-55854.md): MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb (CVSS 5.9)
- [CVE-2026-55215](https://cve.now/CVE-2026-55215.md): MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite \`ssl: true\` (CVSS 7.5)
- [CVE-2026-48165](https://cve.now/CVE-2026-48165.md): MariaDB: unsafe usage of \`wsrep\_sst\_receive\_address\` values on the joiner side (CVSS 8.0)
- [CVE-2026-48163](https://cve.now/CVE-2026-48163.md): MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) (CVSS 8.0)
- [CVE-2026-44173](https://cve.now/CVE-2026-44173.md): MariaDB: FILE privilege was not checked for subqueries in the FROM clause (CVSS 5.0)
- [CVE-2026-44172](https://cve.now/CVE-2026-44172.md): MariaDB: mysql\_real\_escape\_string() incorrectly handled big5 (CVSS 6.9)
- [CVE-2026-44171](https://cve.now/CVE-2026-44171.md): MariaDB: path traversal in mbstream (CVSS 6.3)
- [CVE-2026-44169](https://cve.now/CVE-2026-44169.md): MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions (CVSS 4.3)
- [CVE-2026-44168](https://cve.now/CVE-2026-44168.md): MariaDB: wsrep SST unsafe parameter handling on the donor side (CVSS 8.0)
- [CVE-2026-44170](https://cve.now/CVE-2026-44170.md): MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (CVSS 6.3)
- [CVE-2026-49261](https://cve.now/CVE-2026-49261.md): MariaDB server has unsafe parameter handling in \`wsrep\_notify\_cmd\` (CVSS 10.0)
- [CVE-2026-35549](https://cve.now/CVE-2026-35549.md): An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. (CVSS 6.5)
- [CVE-2026-32710](https://cve.now/CVE-2026-32710.md): Heap-based Buffer Overflow in MariaDB (CVSS 8.6)
- [CVE-2025-13699](https://cve.now/CVE-2025-13699.md): MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability (CVSS 7.0)
- [CVE-2023-52971](https://cve.now/CVE-2023-52971.md): MariaDB Server 10.10 through 10.11.\* and 11.0 through 11.4.\* crashes in JOIN::fix\_all\_splittings\_in\_plan. (CVSS 4.9)
- [CVE-2023-52970](https://cve.now/CVE-2023-52970.md): MariaDB Server 10.4 through 10.5.\*, 10.6 through 10.6.\*, 10.7 through 10.11.\*, 11.0 through 11.0.\*, and 11.1 through 11.4.\* crashes in Item\_ (CVSS 4.9)
- [CVE-2023-52969](https://cve.now/CVE-2023-52969.md): MariaDB Server 10.4 through 10.5.\*, 10.6 through 10.6.\*, 10.7 through 10.11.\*, and 11.0 through 11.0.\* can sometimes crash with an empty bac (CVSS 4.9)
- [CVE-2023-52968](https://cve.now/CVE-2023-52968.md): MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11. (CVSS 4.9)
- [CVE-2022-24052](https://cve.now/CVE-2022-24052.md): MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. (CVSS 7.0)
- [CVE-2022-24051](https://cve.now/CVE-2022-24051.md): MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. (CVSS 7.0)
- [CVE-2022-24050](https://cve.now/CVE-2022-24050.md): MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. (CVSS 7.0)
- [CVE-2022-24048](https://cve.now/CVE-2022-24048.md): MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. (CVSS 7.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mariadb
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.