https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:29:39.975059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07584 bdu:2026-07584 2026-10-03T10:29:39.987671+00:00 bdu:2026-07584 https://cve.radiocsirt.org/vuln/bell-cve-2026-3494 BELL-CVE-2026-3494 2026-10-03T10:29:39.987715+00:00

Affected: Alpaquita:23: mariadb, Alpaquita:25: mariadb, Alpaquita:stream: mariadb

 https://cve.radiocsirt.org/vuln/bit-mariadb-2026-3494 BIT-mariadb-2026-3494 — MariaDB Server Audit Plugin Comment Handling Bypass 2026-10-03T10:29:39.987747+00:00

Affected: Bitnami: mariadb

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0258 certfr-2026-avi-0258 — Une vulnérabilité a été découverte dans Microsoft CBL-Mariner. Elle permet à un attaquant de provoquer un problème de s… 2026-10-03T10:29:39.987793+00:00 certfr-2026-avi-0258 https://cve.radiocsirt.org/vuln/euvd-2026-276206 EUVD-2026-276206 2026-10-03T10:29:39.987830+00:00 EUVD-2026-276206 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3494 fkie_cve-2026-3494 2026-10-03T10:29:39.987865+00:00

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

 https://cve.radiocsirt.org/vuln/ghsa-qmjm-438j-w485 GHSA-qmjm-438j-w485 2026-10-03T10:29:39.987903+00:00

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3494 msrc_CVE-2026-3494 — MariaDB Server Audit Plugin Comment Handling Bypass 2026-10-03T10:29:39.987919+00:00 msrc_CVE-2026-3494 https://cve.radiocsirt.org/vuln/oesa-2026-2395 OESA-2026-2395 — mariadb security update 2026-10-03T10:29:39.987935+00:00

Affected: openEuler:24.03-LTS-SP1: mariadb

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es):

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.(CVE-2026-3494)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 openSUSE-SU-2026:10897-1 — libmariadbd-devel-11.8.7-1.1 on GA media 2026-10-03T10:29:39.987961+00:00

libmariadbd-devel-11.8.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 SUSE-SU-2026:22095-1 — Security update for mariadb 2026-10-03T10:29:39.987980+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3494 UBUNTU-CVE-2026-3494 2026-10-03T10:29:39.987998+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0585 WID-SEC-W-2026-0585 — MariaDB (Server Audit Plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T10:29:39.988024+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MariaDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen.