MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Jun 18, 2026 | Jun 12, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb114-connect-engineUpgrade mariadb114-gssapi-server-debuginfoUpgrade mariadb114-client-utilsUpgrade mariadb114-develUpgrade mariadb114-oqgraph-engine-debuginfoUpgrade mariadb114-sphinx-engine-debuginfoUpgrade mariadb114-server-utils-debuginfoUpgrade mariadb114-sphinx-engineUpgrade mariadb114-server-debuginfoUpgrade mariadb114-oqgraph-engineUpgrade mariadb114-backupUpgrade mariadb114-pam-debuginfoUpgrade mariadb114-errmsgUpgrade mariadb114-rocksdb-engine-debuginfoUpgrade mariadb114-test-debuginfoUpgrade mariadb114-connect-engine-debuginfoUpgrade mariadb114-gssapi-serverUpgrade mariadb114Upgrade mariadb114-server-utilsUpgrade mariadb114-serverUpgrade mariadb114-rocksdb-engineUpgrade mariadb114-debuginfoUpgrade mariadb114-cracklib-password-check-debuginfoUpgrade mariadb114-cracklib-password-checkUpgrade mariadb114-backup-debuginfoUpgrade mariadb114-pamUpgrade mariadb114-debugsourceUpgrade mariadb114-commonUpgrade mariadb114-test | Jun 23, 2026 | Jun 12, 2026 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade mariadb1011-clientUpgrade mariadb114-serverUpgrade mariadb106-serverUpgrade mariadb118-serverUpgrade mariadb106-clientUpgrade mariadb114-clientUpgrade mariadb1011-serverUpgrade mariadb118-client | May 21, 2026 | May 19, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jun 24, 2026 | Jun 12, 2026 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb11.8-commonUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb11.8-debugsourceUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb11.8-embedded-develUpgrade mariadb11.8-embeddedUpgrade mariadb10.11-debuginfoUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-errmsgUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb11.8-pamUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-server-utilsUpgrade mariadb10.11-debugsourceUpgrade mariadb-client-utilsUpgrade mariadb-backupUpgrade mariadb11.8-serverUpgrade mariadb11.8-develUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb11.8Upgrade mariadb11.8-errmsgUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb11.8-testUpgrade mariadb11.8-client-utilsUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb11.8-server-galera | Jul 3, 2026 | Jun 12, 2026 |
| Rocky_linux | — | Upgrade mariadb-pamUpgrade mariadb10.11-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb11.8-pamUpgrade mariadb-server-utilsUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb11.8-server-galeraUpgrade Judy-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb11.8-develUpgrade Judy-debugsourceUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-debuginfoUpgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb11.8-debugsourceUpgrade mariadb-testUpgrade mariadb10.11-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb11.8Upgrade mariadb11.8-oqgraph-engineUpgrade galera-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-embedded-develUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb11.8-embeddedUpgrade galera-debugsourceUpgrade mariadb-client-utilsUpgrade mariadb-serverUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb11.8-test | Jul 3, 2026 | Jun 30, 2026 |
| Ubuntu | — | Upgrade mariadb-server | Jul 14, 2026 | Jun 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 29, 2026 | Jun 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub