MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-develUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-client-utilsUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-gssapi-server | Jul 1, 2026 | Jun 30, 2026 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade mariadb1011-serverUpgrade mariadb114-serverUpgrade mariadb106-serverUpgrade mariadb118-server | Jun 15, 2026 | May 29, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jun 26, 2026 | Jun 11, 2026 |
| Redhat_linux | — | Upgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb11.8-backupUpgrade mariadb11.8-commonUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb-develUpgrade mariadb11.8-client-utilsUpgrade mariadb-server-galeraUpgrade mariadb11.8-develUpgrade mariadb-oqgraph-engineUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb11.8-pamUpgrade mariadb11.8-server-utilsUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadbUpgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb11.8-errmsgUpgrade mariadb10.11-debuginfoUpgrade mariadb-testUpgrade mariadb11.8-serverUpgrade mariadb-gssapi-serverUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb11.8-embedded-develUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-galera-debuginfoUpgrade mariadb11.8Upgrade mariadb-debugsourceUpgrade mariadb11.8-test-debuginfoUpgrade mariadb10.11-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-client-utilsUpgrade Judy-debuginfoUpgrade mariadb11.8-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-embeddedUpgrade mariadb11.8-testUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb11.8-debugsourceUpgrade mariadb-pam-debuginfo | Jul 1, 2026 | Jun 11, 2026 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb10.11-debuginfoUpgrade mariadb-commonUpgrade mariadb11.8Upgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb11.8-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb10.11-debugsourceUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb11.8-develUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb11.8-backupUpgrade galera-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb11.8-embedded-develUpgrade mariadb11.8-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb11.8-debugsourceUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb11.8-testUpgrade mariadb-server-galeraUpgrade mariadb11.8-server-galeraUpgrade mariadb-backupUpgrade mariadb-client-utilsUpgrade mariadb11.8-pamUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb11.8-oqgraph-engine-debuginfo | Jul 3, 2026 | Jun 30, 2026 |
| Ubuntu | — | Upgrade mariadb-server | Jul 14, 2026 | Jun 11, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 29, 2026 | Jun 11, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub