https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:47:23.450659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:0136 ALSA-2026:0136 — Important: mariadb10.11 security update 2026-10-05T10:47:23.513285+00:00

Affected: AlmaLinux:10: mariadb-common, AlmaLinux:10: mariadb-errmsg

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash (CVE-2023-52971) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-00803 bdu:2026-00803 2026-10-05T10:47:23.513367+00:00 bdu:2026-00803 https://cve.radiocsirt.org/vuln/bell-cve-2025-13699 BELL-CVE-2025-13699 2026-10-05T10:47:23.513386+00:00

Affected: Alpaquita:23: mariadb

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0004 certfr-2026-avi-0004 — Une vulnérabilité a été découverte dans MariaDB. Elle permet à un attaquant de provoquer un problème de sécurité non sp… 2026-10-05T10:47:23.513404+00:00 certfr-2026-avi-0004 https://cve.radiocsirt.org/vuln/euvd-2026-264344 EUVD-2026-264344 2026-10-05T10:47:23.513420+00:00 EUVD-2026-264344 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13699 fkie_cve-2025-13699 2026-10-05T10:47:23.513431+00:00

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

 https://cve.radiocsirt.org/vuln/ghsa-rqf2-8625-4vgv GHSA-rqf2-8625-4vgv 2026-10-05T10:47:23.513457+00:00

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13699 msrc_CVE-2025-13699 — MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability 2026-10-05T10:47:23.513475+00:00 msrc_CVE-2025-13699 https://cve.radiocsirt.org/vuln/oesa-2026-1383 OESA-2026-1383 — mariadb security update 2026-10-05T10:47:23.513491+00:00

Affected: openEuler:22.03-LTS-SP4: mariadb

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es):

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.(CVE-2025-13699)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20175-1 openSUSE-SU-2025:20175-1 — Security update for mariadb 2026-10-05T10:47:23.513517+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/rhsa-2026:0061 RHSA-2026:0061 — Red Hat Security Advisory: mariadb security update 2026-10-05T10:47:23.513534+00:00

mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation

 https://cve.radiocsirt.org/vuln/suse-su-2025:4491-1 SUSE-SU-2025:4491-1 — Security update for mariadb 2026-10-05T10:47:23.513550+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13699 UBUNTU-CVE-2025-13699 2026-10-05T10:47:23.513574+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2694 WID-SEC-W-2025-2694 — MariaDB: Schwachstelle ermöglicht Codeausführung 2026-10-05T10:47:23.513604+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MariaDB ausnutzen, um beliebigen Programmcode auszuführen.