Vulnerability-Lookup

OPENSUSE-SU-2026:10897-1

Vulnerability from csaf_opensuse - Published: 2026-05-29 00:00 - Updated: 2026-09-16 20:12

Summary

libmariadbd-devel-11.8.7-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: libmariadbd-devel-11.8.7-1.1 on GA media

Description of the patch: These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10897

CVE-2026-34303

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-3494

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact moderate

CVE-2026-35549

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact moderate

CVE-2026-44168

8 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact important

CVE-2026-44169

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact moderate

CVE-2026-44170

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact important

CVE-2026-44171

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact moderate

CVE-2026-44172

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact important

CVE-2026-44173

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 40 products, the same list as for CVE-2026-34303

Threats

Impact moderate

References

29 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-34303/	self
https://www.suse.com/security/cve/CVE-2026-3494/	self
https://www.suse.com/security/cve/CVE-2026-35549/	self
https://www.suse.com/security/cve/CVE-2026-44168/	self
https://www.suse.com/security/cve/CVE-2026-44169/	self
https://www.suse.com/security/cve/CVE-2026-44170/	self
https://www.suse.com/security/cve/CVE-2026-44171/	self
https://www.suse.com/security/cve/CVE-2026-44172/	self
https://www.suse.com/security/cve/CVE-2026-44173/	self
https://www.suse.com/security/cve/CVE-2026-34303	external
https://bugzilla.suse.com/1266435	external
https://www.suse.com/security/cve/CVE-2026-3494	external
https://bugzilla.suse.com/1259176	external
https://www.suse.com/security/cve/CVE-2026-35549	external
https://bugzilla.suse.com/1261413	external
https://www.suse.com/security/cve/CVE-2026-44168	external
https://bugzilla.suse.com/1266442	external
https://www.suse.com/security/cve/CVE-2026-44169	external
https://bugzilla.suse.com/1266441	external
https://www.suse.com/security/cve/CVE-2026-44170	external
https://bugzilla.suse.com/1266440	external
https://www.suse.com/security/cve/CVE-2026-44171	external
https://bugzilla.suse.com/1266439	external
https://www.suse.com/security/cve/CVE-2026-44172	external
https://bugzilla.suse.com/1266438	external
https://www.suse.com/security/cve/CVE-2026-44173	external
https://bugzilla.suse.com/1266437	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libmariadbd-devel-11.8.7-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10897",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10897-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34303 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34303/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3494 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-35549 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-35549/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44168 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44169 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44170 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44171 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44171/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44172 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44172/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44173 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44173/"
      }
    ],
    "title": "libmariadbd-devel-11.8.7-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-16T20:12:34Z",
      "generator": {
        "date": "2026-05-29T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10897-1",
      "initial_release_date": "2026-05-29T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-05-29T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:12:34Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmariadbd-devel-11.8.7-1.1.aarch64",
                "product": {
                  "name": "libmariadbd-devel-11.8.7-1.1.aarch64",
                  "product_id": "libmariadbd-devel-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd-devel-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libmariadbd19-11.8.7-1.1.aarch64",
                "product": {
                  "name": "libmariadbd19-11.8.7-1.1.aarch64",
                  "product_id": "libmariadbd19-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd19-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:11.8.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-bench-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-bench-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-bench-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-client-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-client-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-client-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-errormessages-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-errormessages-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-errormessages-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-galera-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-galera-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-galera-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-galera-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-rpm-macros-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-rpm-macros-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-rpm-macros-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-rpm-macros-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-test-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-test-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-test-11.8.7-1.1.aarch64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-11.8.7-1.1.aarch64",
                "product": {
                  "name": "mariadb-tools-11.8.7-1.1.aarch64",
                  "product_id": "mariadb-tools-11.8.7-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-tools-11.8.7-1.1.aarch64@"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmariadbd-devel-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "libmariadbd-devel-11.8.7-1.1.ppc64le",
                  "product_id": "libmariadbd-devel-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd-devel-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libmariadbd19-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "libmariadbd19-11.8.7-1.1.ppc64le",
                  "product_id": "libmariadbd19-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd19-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:11.8.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-bench-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-bench-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-bench-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-client-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-client-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-client-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-errormessages-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-errormessages-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-errormessages-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-galera-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-galera-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-galera-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-galera-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-rpm-macros-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-rpm-macros-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-rpm-macros-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-rpm-macros-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-test-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-test-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-test-11.8.7-1.1.ppc64le@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-11.8.7-1.1.ppc64le",
                "product": {
                  "name": "mariadb-tools-11.8.7-1.1.ppc64le",
                  "product_id": "mariadb-tools-11.8.7-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-tools-11.8.7-1.1.ppc64le@"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmariadbd-devel-11.8.7-1.1.s390x",
                "product": {
                  "name": "libmariadbd-devel-11.8.7-1.1.s390x",
                  "product_id": "libmariadbd-devel-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd-devel-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libmariadbd19-11.8.7-1.1.s390x",
                "product": {
                  "name": "libmariadbd19-11.8.7-1.1.s390x",
                  "product_id": "libmariadbd19-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd19-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-11.8.7-1.1.s390x",
                  "product_id": "mariadb-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:11.8.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-bench-11.8.7-1.1.s390x",
                  "product_id": "mariadb-bench-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-bench-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-client-11.8.7-1.1.s390x",
                  "product_id": "mariadb-client-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-client-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-errormessages-11.8.7-1.1.s390x",
                  "product_id": "mariadb-errormessages-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-errormessages-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-galera-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-galera-11.8.7-1.1.s390x",
                  "product_id": "mariadb-galera-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-galera-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-rpm-macros-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-rpm-macros-11.8.7-1.1.s390x",
                  "product_id": "mariadb-rpm-macros-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-rpm-macros-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-test-11.8.7-1.1.s390x",
                  "product_id": "mariadb-test-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-test-11.8.7-1.1.s390x@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-11.8.7-1.1.s390x",
                "product": {
                  "name": "mariadb-tools-11.8.7-1.1.s390x",
                  "product_id": "mariadb-tools-11.8.7-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-tools-11.8.7-1.1.s390x@"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libmariadbd-devel-11.8.7-1.1.x86_64",
                "product": {
                  "name": "libmariadbd-devel-11.8.7-1.1.x86_64",
                  "product_id": "libmariadbd-devel-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd-devel-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libmariadbd19-11.8.7-1.1.x86_64",
                "product": {
                  "name": "libmariadbd19-11.8.7-1.1.x86_64",
                  "product_id": "libmariadbd19-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libmariadbd19-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:mariadb:mariadb:11.8.7:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/mariadb-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-bench-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-bench-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-bench-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-bench-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-client-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-client-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-client-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-client-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-errormessages-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-errormessages-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-errormessages-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-errormessages-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-galera-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-galera-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-galera-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-galera-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-rpm-macros-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-rpm-macros-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-rpm-macros-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-rpm-macros-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-test-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-test-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-test-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-test-11.8.7-1.1.x86_64@"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mariadb-tools-11.8.7-1.1.x86_64",
                "product": {
                  "name": "mariadb-tools-11.8.7-1.1.x86_64",
                  "product_id": "mariadb-tools-11.8.7-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mariadb-tools-11.8.7-1.1.x86_64@"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd-devel-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64"
        },
        "product_reference": "libmariadbd-devel-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd-devel-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le"
        },
        "product_reference": "libmariadbd-devel-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd-devel-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x"
        },
        "product_reference": "libmariadbd-devel-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd-devel-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64"
        },
        "product_reference": "libmariadbd-devel-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd19-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64"
        },
        "product_reference": "libmariadbd19-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd19-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le"
        },
        "product_reference": "libmariadbd19-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd19-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x"
        },
        "product_reference": "libmariadbd19-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmariadbd19-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64"
        },
        "product_reference": "libmariadbd19-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-bench-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-bench-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-bench-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-bench-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-bench-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-client-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-client-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-client-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-client-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-client-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-errormessages-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-errormessages-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-errormessages-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-errormessages-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-errormessages-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-galera-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-galera-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-galera-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-galera-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-galera-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-galera-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-galera-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-galera-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-rpm-macros-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-rpm-macros-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-rpm-macros-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-rpm-macros-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-rpm-macros-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-rpm-macros-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-rpm-macros-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-rpm-macros-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-test-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-test-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-test-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-test-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-test-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-11.8.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64"
        },
        "product_reference": "mariadb-tools-11.8.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-11.8.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le"
        },
        "product_reference": "mariadb-tools-11.8.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-11.8.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x"
        },
        "product_reference": "mariadb-tools-11.8.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mariadb-tools-11.8.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        },
        "product_reference": "mariadb-tools-11.8.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34303",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34303"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34303",
          "url": "https://www.suse.com/security/cve/CVE-2026-34303"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266435 for CVE-2026-34303",
          "url": "https://bugzilla.suse.com/1266435"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-34303"
    },
    {
      "cve": "CVE-2026-3494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (-) or hash (#) style comments, the statement is not logged.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3494",
          "url": "https://www.suse.com/security/cve/CVE-2026-3494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259176 for CVE-2026-3494",
          "url": "https://bugzilla.suse.com/1259176"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-3494"
    },
    {
      "cve": "CVE-2026-35549",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-35549"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-35549",
          "url": "https://www.suse.com/security/cve/CVE-2026-35549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261413 for CVE-2026-35549",
          "url": "https://bugzilla.suse.com/1261413"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-35549"
    },
    {
      "cve": "CVE-2026-44168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44168",
          "url": "https://www.suse.com/security/cve/CVE-2026-44168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266442 for CVE-2026-44168",
          "url": "https://bugzilla.suse.com/1266442"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44168"
    },
    {
      "cve": "CVE-2026-44169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44169",
          "url": "https://www.suse.com/security/cve/CVE-2026-44169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266441 for CVE-2026-44169",
          "url": "https://bugzilla.suse.com/1266441"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-44169"
    },
    {
      "cve": "CVE-2026-44170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell commands on the server. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44170",
          "url": "https://www.suse.com/security/cve/CVE-2026-44170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266440 for CVE-2026-44170",
          "url": "https://bugzilla.suse.com/1266440"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44170"
    },
    {
      "cve": "CVE-2026-44171",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44171"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44171",
          "url": "https://www.suse.com/security/cve/CVE-2026-44171"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266439 for CVE-2026-44171",
          "url": "https://bugzilla.suse.com/1266439"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-44171"
    },
    {
      "cve": "CVE-2026-44172",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44172"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44172",
          "url": "https://www.suse.com/security/cve/CVE-2026-44172"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266438 for CVE-2026-44172",
          "url": "https://bugzilla.suse.com/1266438"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44172"
    },
    {
      "cve": "CVE-2026-44173",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44173"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
          "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44173",
          "url": "https://www.suse.com/security/cve/CVE-2026-44173"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266437 for CVE-2026-44173",
          "url": "https://bugzilla.suse.com/1266437"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd-devel-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:libmariadbd19-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-bench-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-client-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-errormessages-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-galera-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-rpm-macros-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-test-11.8.7-1.1.x86_64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.aarch64",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.ppc64le",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.s390x",
            "openSUSE Tumbleweed:mariadb-tools-11.8.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-44173"
    }
  ]
}

CVE-2026-34303 (GCVE-0-2026-34303)

Vulnerability from cvelistv5 – Published: 2026-04-21 20:35 – Updated: 2026-04-22 13:27

Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-22 13:27 UTC

CWE

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
CWE-400 - Uncontrolled Resource Consumption

Assigner

oracle mitre root

References

1 reference

URL	Tags
https://www.oracle.com/security-alerts/cpuapr2026.html	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 8.0.0 , ≤ 8.0.45 (custom) Affected: 8.4.0 , ≤ 8.4.8 (custom) Affected: 9.0.0 , ≤ 9.6.0 (custom) cpe:2.3:a:oracle:mysql_server:::::::: cpe:2.3:a:oracle:mysql_server:::::::: cpe:2.3:a:oracle:mysql_server::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T13:27:37.474107Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T13:27:41.169Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "lessThanOrEqual": "8.0.45",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "8.4.8",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.6.0",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "8.0.45",
                  "versionStartIncluding": "8.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "8.4.8",
                  "versionStartIncluding": "8.4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.6.0",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-21T20:35:32.627Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2026.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2026-34303",
    "datePublished": "2026-04-21T20:35:32.627Z",
    "dateReserved": "2026-03-26T19:48:45.678Z",
    "dateUpdated": "2026-04-22T13:27:41.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3494 (GCVE-0-2026-3494)

Vulnerability from cvelistv5 – Published: 2026-03-03 18:12 – Updated: 2026-03-16 17:03

Title

MariaDB Server Audit Plugin Comment Handling Bypass

Summary

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-03 18:56 UTC

CWE

CWE-778 - (Insufficient Logging)

Assigner

AMZN mitre root

References

3 references

URL	Tags
https://aws.amazon.com/security/security-bulletin…	vendor-advisory
https://github.com/MariaDB/server/commit/635559a2…	patch
https://github.com/aws/audit-plugin-for-mysql/com…	patch

Impacted products

4 products

Vendor	Product	Version
MariaDB Foundation	MariaDB Server	Unaffected: 10.6.25 Unaffected: 10.11.16 Unaffected: 11.4.10 Unaffected: 11.8.6
Amazon	Aurora MySQL	Unaffected: 2.12.6 Unaffected: 3.04.6 Unaffected: 3.10.3 Unaffected: 3.11.1
Amazon	RDS for MySQL	Unaffected: 5.7.44-RDS.20260212 Unaffected: 8.0.45 Unaffected: 8.4.8
Amazon	RDS for MariaDB	Unaffected: 10.6.25 Unaffected: 10.11.16 Unaffected: 11.4.10 Unaffected: 11.8.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3494",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-03T18:56:25.959459Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-03T18:56:35.946Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MariaDB Server",
          "vendor": "MariaDB Foundation",
          "versions": [
            {
              "status": "unaffected",
              "version": "10.6.25"
            },
            {
              "status": "unaffected",
              "version": "10.11.16"
            },
            {
              "status": "unaffected",
              "version": "11.4.10"
            },
            {
              "status": "unaffected",
              "version": "11.8.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Aurora MySQL",
          "vendor": "Amazon",
          "versions": [
            {
              "status": "unaffected",
              "version": "2.12.6"
            },
            {
              "status": "unaffected",
              "version": "3.04.6"
            },
            {
              "status": "unaffected",
              "version": "3.10.3"
            },
            {
              "status": "unaffected",
              "version": "3.11.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RDS for MySQL",
          "vendor": "Amazon",
          "versions": [
            {
              "status": "unaffected",
              "version": "5.7.44-RDS.20260212"
            },
            {
              "status": "unaffected",
              "version": "8.0.45"
            },
            {
              "status": "unaffected",
              "version": "8.4.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RDS for MariaDB",
          "vendor": "Amazon",
          "versions": [
            {
              "status": "unaffected",
              "version": "10.6.25"
            },
            {
              "status": "unaffected",
              "version": "10.11.16"
            },
            {
              "status": "unaffected",
              "version": "11.4.10"
            },
            {
              "status": "unaffected",
              "version": "11.8.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (\u2014) or hash (#) style comments, the statement is not logged.\u003c/p\u003e"
            }
          ],
          "value": "In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (\u2014) or hash (#) style comments, the statement is not logged."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-93",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-93 (Log Injection-Tampering-Forging)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-778",
              "description": "CWE-778 (Insufficient Logging)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-16T17:03:08.613Z",
        "orgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "shortName": "AMZN"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://aws.amazon.com/security/security-bulletins/2026-006-AWS/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/MariaDB/server/commit/635559a2ad68a5a6d1a354e8209c58323dba0261"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/aws/audit-plugin-for-mysql/commit/01e25a5cb1073f131eea774c06c8a056b1e4b2ff"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB Server Audit Plugin Comment Handling Bypass",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
    "assignerShortName": "AMZN",
    "cveId": "CVE-2026-3494",
    "datePublished": "2026-03-03T18:12:12.361Z",
    "dateReserved": "2026-03-03T17:26:55.939Z",
    "dateUpdated": "2026-03-16T17:03:08.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35549 (GCVE-0-2026-35549)

Vulnerability from cvelistv5 – Published: 2026-04-03 05:00 – Updated: 2026-04-03 14:34

Summary

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-03 14:33 UTC

CWE

CWE-789 - Memory Allocation with Excessive Size Value

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://jira.mariadb.org/browse/MDEV-38365

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 0 , < 11.4.10 (semver) Affected: 11.5.0 , < 11.8.6 (semver) Affected: 12.0.0 , < 12.2.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35549",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T14:33:50.651023Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T14:34:04.466Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "lessThan": "11.4.10",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.8.6",
              "status": "affected",
              "version": "11.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "12.2.2",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "CWE-789 Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-03T05:00:18.121Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://jira.mariadb.org/browse/MDEV-38365"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35549",
    "datePublished": "2026-04-03T05:00:18.121Z",
    "dateReserved": "2026-04-03T05:00:17.626Z",
    "dateUpdated": "2026-04-03T14:34:04.466Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44168 (GCVE-0-2026-44168)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:31 – Updated: 2026-08-03 12:06

Title

MariaDB: wsrep SST unsafe parameter handling on the donor side

Summary

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Severity

8 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-15 00:00 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M mitre root

References

13 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-39413	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-44168	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488450	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:49522	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33093	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33464	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33481	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25145	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25143	vendor-advisoryx_refsource_REDHAT

Impacted products

10 products

Vendor	Product	Version
MariaDB	server	Affected: >= 10.6.1, < 10.6.26 Affected: >= 10.11.1, < 10.11.17 Affected: >= 11.4.1, < 11.4.11 Affected: >= 11.8.1, < 11.8.7 Affected: >= 12.3.1, < 12.3.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:10.11.18-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:11.8.8-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260616102001.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612104015.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612103452.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	Unaffected: 11.8.8-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 10.11.18-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44168",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T03:55:54.131Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:10.11.18-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11.8",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:11.8.8-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260616102001.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:11.8",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612104015.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612103452.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11-8-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "11.8.8-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10-11-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "10.11.18-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T17:31:26.921Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in MariaDB. During a State Snapshot Transfer (SST), the donor node improperly validates parameters sent by a joiner node. This vulnerability allows a malicious joiner to execute arbitrary shell commands on the donor server through the mariabackup SST method. This could lead to a complete compromise of the donor system."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-03T12:06:06.184Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44168"
          },
          {
            "name": "RHBZ#2488450",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488450"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44168.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49522"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33093"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33464"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25145"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25143"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:49522: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33093: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33412: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33464: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33482: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33481: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25145: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25143: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T18:01:00.657Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T17:31:26.921Z",
            "value": "Made public."
          }
        ],
        "title": "mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.6.1, \u003c 10.6.26"
            },
            {
              "status": "affected",
              "version": "\u003e= 10.11.1, \u003c 10.11.17"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.4.1, \u003c 11.4.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.8.1, \u003c 11.8.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.3.1, \u003c 12.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:31:26.921Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h"
        },
        {
          "name": "https://jira.mariadb.org/browse/MDEV-39413",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-39413"
        }
      ],
      "source": {
        "advisory": "GHSA-vwf7-w26c-9w5h",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: wsrep SST unsafe parameter handling on the donor side"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44168",
    "datePublished": "2026-06-12T17:31:26.921Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-08-03T12:06:06.184Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44169 (GCVE-0-2026-44169)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:31 – Updated: 2026-06-13 03:24

Title

MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

Summary

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-13 03:24 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-39288	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
MariaDB	server	Affected: >= 11.4.1, < 11.4.11 Affected: >= 11.8.1, < 11.8.7 Affected: >= 12.3.1, < 12.3.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44169",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-13T03:24:33.051833Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-13T03:24:46.192Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 11.4.1, \u003c 11.4.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.8.1, \u003c 11.8.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.3.1, \u003c 12.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:31:53.344Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2"
        },
        {
          "name": "https://jira.mariadb.org/browse/MDEV-39288",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-39288"
        }
      ],
      "source": {
        "advisory": "GHSA-22xq-vq3f-87x2",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44169",
    "datePublished": "2026-06-12T17:31:53.344Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-06-13T03:24:46.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44170 (GCVE-0-2026-44170)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:30 – Updated: 2026-08-03 12:05

Title

MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

Summary

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell commands on the server. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-15 00:00 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M mitre root

References

13 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-39289	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-44170	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488451	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:49522	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33093	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33464	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33481	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25145	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25143	vendor-advisoryx_refsource_REDHAT

Impacted products

11 products

Vendor	Product	Version
MariaDB	server	Affected: >= 10.6.1, < 10.6.26 Affected: >= 10.11.1, < 10.11.17 Affected: >= 11.4.1, < 11.4.11 Affected: >= 11.8.1, < 11.8.7 Affected: >= 12.3.1, < 12.3.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:10.11.18-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:11.8.8-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 3:10.11.18-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260616102001.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612104015.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612103452.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	Unaffected: 11.8.8-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 10.11.18-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44170",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T03:55:45.155Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:10.11.18-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11.8",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:11.8.8-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:10.11.18-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260616102001.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:11.8",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612104015.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612103452.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11-8-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "11.8.8-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10-11-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "10.11.18-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T17:30:15.405Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in MariaDB server. When the CONNECT engine is installed and REST support is enabled on Windows, a user can exploit improper sanitization of the table HTTP attribute. This attribute is interpolated into the curl command line, allowing for arbitrary shell command execution on the server."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.9,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-03T12:05:48.194Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44170"
          },
          {
            "name": "RHBZ#2488451",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488451"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44170.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49522"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33093"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33464"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25145"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25143"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:49522: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33093: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33412: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33464: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33482: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33481: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25145: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25143: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T18:01:03.632Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T17:30:15.405Z",
            "value": "Made public."
          }
        ],
        "title": "mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.6.1, \u003c 10.6.26"
            },
            {
              "status": "affected",
              "version": "\u003e= 10.11.1, \u003c 10.11.17"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.4.1, \u003c 11.4.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.8.1, \u003c 11.8.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.3.1, \u003c 12.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell commands on the server. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:30:15.405Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-f835-cfjq-wf73"
        },
        {
          "name": "https://jira.mariadb.org/browse/MDEV-39289",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-39289"
        }
      ],
      "source": {
        "advisory": "GHSA-f835-cfjq-wf73",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44170",
    "datePublished": "2026-06-12T17:30:15.405Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-08-03T12:05:48.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44171 (GCVE-0-2026-44171)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:33 – Updated: 2026-06-12 18:06

Title

MariaDB: path traversal in mbstream

Summary

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 18:06 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-39408	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
MariaDB	server	Affected: >= 10.6.1, < 10.6.26 Affected: >= 10.11.1, < 10.11.17 Affected: >= 11.4.1, < 11.4.11 Affected: >= 11.8.1, < 11.8.7 Affected: >= 12.3.1, < 12.3.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44171",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T18:06:39.324744Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T18:06:49.446Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.6.1, \u003c 10.6.26"
            },
            {
              "status": "affected",
              "version": "\u003e= 10.11.1, \u003c 10.11.17"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.4.1, \u003c 11.4.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.8.1, \u003c 11.8.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.3.1, \u003c 12.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:33:27.365Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9"
        },
        {
          "name": "https://jira.mariadb.org/browse/MDEV-39408",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-39408"
        }
      ],
      "source": {
        "advisory": "GHSA-9pjh-5hhw-65v9",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: path traversal in mbstream"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44171",
    "datePublished": "2026-06-12T17:33:27.365Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-06-12T18:06:49.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44172 (GCVE-0-2026-44172)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:34 – Updated: 2026-07-30 12:04

Title

MariaDB: mysql_real_escape_string() incorrectly handled big5

Summary

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 20:02 UTC

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

GitHub_M mitre root

References

8 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/CONC-819	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-44172	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488459	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:47772	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43505	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30135	vendor-advisoryx_refsource_REDHAT

Impacted products

9 products

Vendor	Product	Version
MariaDB	server	Affected: = 3.3.18 Affected: = 3.4.8
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.4.4-2.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.4.4-1.el10_0.1 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Hardened Images	Unaffected: 3.4.9-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44172",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T20:02:02.774991Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T20:02:12.617Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb-connector-c",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.4-2.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb-connector-c",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.4-1.el10_0.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb-connector-c-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3.4.9-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb11.8",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb:10.11/mariadb",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb:10.3/mariadb",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb-connector-c",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb:10.11/mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb:11.8/mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb-connector-c",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb11.8",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T17:34:04.487Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in MariaDB server. An application processing non-validated user input, which then uses `mysql_real_escape_string()` and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL commands, potentially leading to unauthorized data access or modification within the database."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-89",
                "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-30T12:04:56.718Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44172"
          },
          {
            "name": "RHBZ#2488459",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488459"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44172.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47772"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43505"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30135"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:47772: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43505: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30135: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T18:01:33.248Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T17:34:04.487Z",
            "value": "Made public."
          }
        ],
        "title": "mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "= 3.3.18"
            },
            {
              "status": "affected",
              "version": "= 3.4.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:34:04.487Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-pv9p-5w55-55jm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-pv9p-5w55-55jm"
        },
        {
          "name": "https://jira.mariadb.org/browse/CONC-819",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/CONC-819"
        }
      ],
      "source": {
        "advisory": "GHSA-pv9p-5w55-55jm",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: mysql_real_escape_string() incorrectly handled big5"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44172",
    "datePublished": "2026-06-12T17:34:04.487Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-07-30T12:04:56.718Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-44173 (GCVE-0-2026-44173)

Vulnerability from cvelistv5 – Published: 2026-06-12 17:34 – Updated: 2026-08-03 12:06

Title

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

Summary

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Severity

5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-12 18:03 UTC

CWE

CWE-863 - Incorrect Authorization
CWE-266 - Incorrect Privilege Assignment

Assigner

GitHub_M mitre root

References

13 references

URL	Tags
https://github.com/MariaDB/server/security/adviso…	x_refsource_CONFIRM
https://jira.mariadb.org/browse/MDEV-39493	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-44173	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2488460	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:49522	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33093	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33464	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33481	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25145	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25143	vendor-advisoryx_refsource_REDHAT

Impacted products

10 products

Vendor	Product	Version
MariaDB	server	Affected: >= 10.6.1, < 10.6.26 Affected: >= 10.11.1, < 10.11.17 Affected: >= 11.4.1, < 11.4.11 Affected: >= 11.8.1, < 11.8.7 Affected: >= 12.3.1, < 12.3.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:10.11.18-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 3:11.8.8-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260616102001.489197e6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612104015.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 9080020260612103452.rhel9 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Hardened Images	Unaffected: 11.8.8-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 10.11.18-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44173",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-12T18:03:24.496133Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-12T18:03:34.244Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10.11",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:10.11.18-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11.8",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "3:11.8.8-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260616102001.489197e6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:11.8",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612104015.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb:10.11",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9080020260612103452.rhel9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb11-8-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "11.8.8-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "mariadb10-11-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "10.11.18-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mariadb",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-12T17:34:30.301Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in MariaDB server. This vulnerability allows a low-privileged authenticated user to bypass a security control that normally restricts file operations. Specifically, the system failed to verify the necessary \u0027FILE\u0027 privilege when certain \u0027SELECT\u0027 statements, which write data to files, were executed with subqueries in their \u0027FROM\u0027 clause. This could enable an attacker to write unauthorized files to the server\u0027s file system, potentially leading to the disclosure of sensitive information or a denial of service by corrupting or filling disk space."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-266",
                "description": "Incorrect Privilege Assignment",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-03T12:06:06.566Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-44173"
          },
          {
            "name": "RHBZ#2488460",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488460"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44173.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49522"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33093"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33464"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33481"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25145"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:25143"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:49522: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33093: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33412: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33464: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33482: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33481: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25145: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:25143: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-12T18:01:36.157Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-12T17:34:30.301Z",
            "value": "Made public."
          }
        ],
        "title": "mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "server",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.6.1, \u003c 10.6.26"
            },
            {
              "status": "affected",
              "version": "\u003e= 10.11.1, \u003c 10.11.17"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.4.1, \u003c 11.4.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.8.1, \u003c 11.8.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.3.1, \u003c 12.3.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-12T17:34:30.301Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc"
        },
        {
          "name": "https://jira.mariadb.org/browse/MDEV-39493",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-39493"
        }
      ],
      "source": {
        "advisory": "GHSA-667j-m53j-wpmc",
        "discovery": "UNKNOWN"
      },
      "title": "MariaDB: FILE privilege was not checked for subqueries in the FROM clause"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44173",
    "datePublished": "2026-06-12T17:34:30.301Z",
    "dateReserved": "2026-05-05T14:39:34.923Z",
    "dateUpdated": "2026-08-03T12:06:06.566Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:10897-1

CVE-2026-34303 (GCVE-0-2026-34303)

CVE-2026-3494 (GCVE-0-2026-3494)

CVE-2026-35549 (GCVE-0-2026-35549)

CVE-2026-44168 (GCVE-0-2026-44168)

CVE-2026-44169 (GCVE-0-2026-44169)

CVE-2026-44170 (GCVE-0-2026-44170)

CVE-2026-44171 (GCVE-0-2026-44171)

CVE-2026-44172 (GCVE-0-2026-44172)

CVE-2026-44173 (GCVE-0-2026-44173)

Tags

Sightings

Nomenclature

Related by attack behaviour