MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Jun 18, 2026 | Jun 12, 2026 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade mariadb114-serverUpgrade mariadb118-serverUpgrade mariadb1011-serverUpgrade mariadb106-server | Jun 15, 2026 | May 29, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jun 24, 2026 | Jun 12, 2026 |
| Redhat_linux | — | Upgrade mariadb11.8-embedded-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb11.8-develUpgrade mariadb-gssapi-serverUpgrade mariadb10.11-debuginfoUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb11.8-pam-debuginfoUpgrade JudyUpgrade mariadb11.8-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb11.8Upgrade mariadb11.8-pamUpgrade mariadbUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-serverUpgrade galera-debuginfoUpgrade mariadb11.8-embeddedUpgrade mariadb11.8-client-utilsUpgrade mariadb11.8-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb11.8-testUpgrade mariadb11.8-server-galeraUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb11.8-commonUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb11.8-debugsourceUpgrade mariadb-client-utilsUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb11.8-server-utilsUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb10.11-debugsourceUpgrade mariadb-server-galera-debuginfoUpgrade mariadb11.8-errmsg | Jul 3, 2026 | Jun 12, 2026 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb11.8-backupUpgrade mariadb11.8-debugsourceUpgrade galera-debugsourceUpgrade mariadb11.8-embedded-develUpgrade JudyUpgrade mariadb-develUpgrade mariadb11.8-embeddedUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb10.11-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb11.8-pamUpgrade mariadb11.8-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb11.8-server-galeraUpgrade galeraUpgrade galera-debuginfoUpgrade mariadb11.8-testUpgrade mariadb-client-utilsUpgrade Judy-debugsourceUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8Upgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb10.11-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb11.8-devel | Jul 3, 2026 | Jun 30, 2026 |
| Ubuntu | — | Upgrade mariadb-server | Jul 14, 2026 | Jun 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 29, 2026 | Jun 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub