MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell commands on the server. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Jun 18, 2026 | Jun 12, 2026 |
| Freebsd | — | Upgrade mariadb106-serverUpgrade mariadb118-clientUpgrade mariadb106-clientUpgrade mariadb114-clientUpgrade mariadb1011-clientUpgrade mariadb114-serverUpgrade mariadb1011-serverUpgrade mariadb118-server | May 21, 2026 | May 19, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jun 24, 2026 | Jun 12, 2026 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-embeddedUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb11.8-embeddedUpgrade mariadb11.8-embedded-develUpgrade mariadb11.8-testUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb11.8-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb10.11-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb11.8-pamUpgrade mariadb-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-client-utilsUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-test-debuginfoUpgrade mariadbUpgrade mariadb11.8-develUpgrade mariadb11.8-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb11.8-client-utilsUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb11.8-commonUpgrade mariadb-backupUpgrade mariadb11.8-server-utilsUpgrade mariadb-commonUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb11.8-debugsourceUpgrade mariadb-server-galera-debuginfoUpgrade mariadb11.8Upgrade mariadb10.11-debugsource | Jul 3, 2026 | Jun 12, 2026 |
| Rocky_linux | — | Upgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb11.8-testUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb11.8-pamUpgrade mariadb11.8-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade mariadb11.8-embedded-develUpgrade mariadb10.11-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-client-utilsUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb11.8-embeddedUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb11.8-develUpgrade mariadb-pamUpgrade mariadb-server-galera-debuginfoUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb11.8-test-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb11.8Upgrade mariadb11.8-pam-debuginfoUpgrade JudyUpgrade mariadb10.11-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb11.8-debugsource | Jul 3, 2026 | Jun 30, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 29, 2026 | Jun 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub