Login Request a demo
SE
Product
server
by MariaDB · last CVE Oct 16, 2026
26
CVEs
0
On KEV
9.9
Max CVSS
16
New 30D
Vulnerabilities26In the news2Timeline
Severity mix
Critical 7High 11Medium 8Low 0
Severity
All severities26Critical7High11Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97380
8.8
1%
Oct 16
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107815
8.5
1%
Oct 9
MariaDB: one byte OOB write in DOS tables of the CONNECT engine
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107818
8.4
0%
Oct 9
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107814
8.4
0%
Oct 9
MariaDB: Insecure $HOME in MariaDB rpm packages
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107821
8.0
1%
Oct 9
MariaDB: insufficient validation of binary frm data when opening a table
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-44168
8.0
1%
Jun 12
MariaDB: wsrep SST unsafe parameter handling on the donor side
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-44171
7.8
0%
Jun 12
MariaDB: path traversal in mbstream
Affected: >= 10.6.1, < 10.6.26; >= 10.11.1, < 10.11.17; >= 11.4.1, < 11.4.11; >= 11.8.1, < 11.8.7; >= 12.3.1, < 12.3.2
CVE-2026-86047
7.7
1%
Oct 16
MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-107823
7.2
1%
Oct 9
MariaDB: privilege escalation via incorrect view frm parsing
Affected: >= 10.6.1, < 10.6.28; >= 10.11.1, < 10.11.19; >= 11.4.1, < 11.4.13; >= 11.8.1, < 11.8.9; >= 12.3.1, < 12.3.3; >= 13.0.1, < 13.0.2
CVE-2026-48165
7.2
2%
Jun 12
MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; >= 12.3.1, < 12.3.2
CVE-2026-48163
7.2
1%
Jun 12
MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)
Affected: >= 10.6.1, < 10.6.27; >= 10.11.1, < 10.11.18; >= 11.4.1, < 11.4.12; >= 11.8.1, < 11.8.8; >= 12.3.1, < 12.3.2
Showing 11