{"kind": "product", "path": "vulns/debian-14/mariadb", "name": "mariadb", "product": "mariadb", "ecosystem": "Debian:14", "items": [{"id": "CVE-2026-86047", "noindex": false, "published": "2026-10-16T16:37:04.254Z", "modified": "2026-10-19T12:42:14.961Z", "cvss": 7.7, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H", "severity": "high", "epss": 0.00324, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-86047", "title": "MariaDB: Insufficient quoting in mariadb-dump and SHOW commands", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A low-privileged attacker can trigger the issue when an attacker-created object with crafted identifiers or values is included in SHOW output or a dump, then create an object with crafted identifiers or values so generated SQL contains injected statements and execute attacker-injected SQL when the poisoned output is applied. This issue is fixed in versions 1", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p", "https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52", "https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-85745", "noindex": false, "published": "2026-10-16T16:30:30.866Z", "modified": "2026-10-19T12:39:16.848Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "severity": "medium", "epss": 0.00337, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-85745", "title": "MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header without first verifying enough input remains. A low-privileged remote attacker can supply malformed spatial data to disclose memory useful for bypassing ASLR as part of a multi-vulnerability chain. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8", "https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-85746", "noindex": false, "published": "2026-10-16T16:27:36.763Z", "modified": "2026-10-16T17:05:31.146Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00629, "kev": false, "exploits": ["public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-85746", "title": "MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for bytes consumed or reserve sufficient space. A low-privileged remote attacker can submit a specially crafted GIS object to corrupt memory and potentially achieve code execution when combined with another vulnerability. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-8fvj-c57c-pggx", "https://github.com/MariaDB/server/commit/5c04ca5524385356ff7cf84974a7d491974c1f85", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-92262", "noindex": false, "published": "2026-10-16T16:25:46.964Z", "modified": "2026-10-21T02:28:14.389Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00725, "kev": false, "exploits": ["public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-92262", "title": "MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name using the #mysql50# prefix, then use a #mysql50# table name to access files under their legacy unencoded name and cause crashes, data corruption, data exfiltration, or remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-65jj-h265-3m7h", "https://github.com/MariaDB/server/commit/574ba66b2d6c5d71db83d416677876e9b592858e", "https://github.com/MariaDB/server/commit/f277eefa424850a8cba5c2371406047f6395e8bb"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-97380", "noindex": false, "published": "2026-10-16T16:23:07.975Z", "modified": "2026-10-16T16:23:07.975Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00557, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-97380", "title": "MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor privileges. A low-privileged attacker who can name another account can exploit this authorization error to set that account's password. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr", "https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-85985", "noindex": false, "published": "2026-10-16T16:21:14.677Z", "modified": "2026-10-16T17:05:42.975Z", "cvss": 5.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00212, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-85985", "title": "MariaDB: Unauthorized file access via CONNECT engine UDFs", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affected because each does not enforce FILE privilege or the secure_file_priv setting. A low-privileged attacker can trigger the issue by calling a CONNECT file-access UDF with a filesystem path, then invoke a CONNECT file-access UDF to access a filesystem path and read or write files that the database account is not authorized to access, subject to operating-system permissions. This issue is f", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6", "https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107823", "noindex": false, "published": "2026-10-09T17:30:36.062Z", "modified": "2026-10-13T17:04:53.917Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00711, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107823", "title": "MariaDB: privilege escalation via incorrect view frm parsing", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37", "https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107822", "noindex": false, "published": "2026-10-09T17:28:47.578Z", "modified": "2026-10-13T20:27:06.868Z", "cvss": 6.4, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.00478, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107822", "title": "MariaDB: database privilege escalation via user / role name collision in the acl cache", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf", "https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107821", "noindex": false, "published": "2026-10-09T17:27:16.316Z", "modified": "2026-10-09T17:42:29.482Z", "cvss": 8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00758, "kev": false, "exploits": ["public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107821", "title": "MariaDB: insufficient validation of binary frm data when opening a table", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5", "https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107818", "noindex": false, "published": "2026-10-09T17:23:58.543Z", "modified": "2026-10-14T02:02:34.303Z", "cvss": 8.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00336, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107818", "title": "MariaDB: environment injection via wsrep bootstrap in the mariadb.service file", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5", "https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107817", "noindex": false, "published": "2026-10-09T17:22:19.290Z", "modified": "2026-10-13T17:04:02.004Z", "cvss": 4.4, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", "severity": "medium", "epss": 0.00137, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107817", "title": "MariaDB: mysql_json plugin OOB reads", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data could cause out-of-bounds reads, information disclosure, or a server crash. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc", "https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107816", "noindex": false, "published": "2026-10-09T17:19:00.365Z", "modified": "2026-10-13T20:27:21.152Z", "cvss": 6.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L", "severity": "medium", "epss": 0.00312, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107816", "title": "MariaDB: `qc_info` plugin can do OOB reads if query contains \\0", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6", "https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107815", "noindex": false, "published": "2026-10-09T16:05:49.046Z", "modified": "2026-10-13T17:01:48.035Z", "cvss": 8.5, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00896, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-107815", "title": "MariaDB: one byte OOB write in DOS tables of the CONNECT engine", "description": "MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq", "https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8", "https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-61081", "noindex": false, "published": "2026-07-21T21:38:02.369Z", "modified": "2026-07-23T19:14:08.540Z", "cvss": 2.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "severity": "low", "epss": 0.00259, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-61081", "title": "CVE-2026-61081", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-61081"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-60747", "noindex": false, "published": "2026-07-21T21:36:47.847Z", "modified": "2026-07-24T19:01:57.160Z", "cvss": 6.2, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00194, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-60747", "title": "CVE-2026-60747", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.2 (Availability impacts", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-60747"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-60585", "noindex": false, "published": "2026-07-21T21:36:00.898Z", "modified": "2026-07-28T03:56:38.972Z", "cvss": 6.6, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.0036, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-60585", "title": "CVE-2026-60585", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-60585"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-60331", "noindex": false, "published": "2026-07-21T21:34:30.433Z", "modified": "2026-07-28T03:56:37.339Z", "cvss": 6.4, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.00197, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-60331", "title": "CVE-2026-60331", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-60331"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-60184", "noindex": false, "published": "2026-07-21T21:33:34.970Z", "modified": "2026-07-23T15:02:23.352Z", "cvss": 4.4, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00353, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-60184", "title": "CVE-2026-60184", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-60184"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-47023", "noindex": false, "published": "2026-07-21T21:33:06.123Z", "modified": "2026-07-23T15:27:02.974Z", "cvss": 4.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00323, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-47023", "title": "CVE-2026-47023", "description": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/A", "references": ["https://www.oracle.com/security-alerts/cpujul2026.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-47023"], "fixes": ["1:11.8.9+ds-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-48165", "noindex": false, "published": "2026-06-12T17:35:16.918Z", "modified": "2026-08-03T12:05:49.897Z", "cvss": 8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.01602, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}], "path": "vulns/cve-2026-48165", "title": "MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side", "description": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.", "references": ["https://github.com/MariaDB/server/security/advisories/GHSA-7v3p-h23x-8hwv", "https://jira.mariadb.org/browse/MDEV-39676", "https://access.redhat.com/security/cve/CVE-2026-48165"], "fixes": ["1:11.8.8-1"], "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}]}], "total": 42, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 3, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "mariadb", "path": "vulns/debian-14/mariadb", "ecosystem": "Debian:14"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 13, "kev": 0}, "lastmod": "2026-10-21T02:28:14.389Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}