https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:28:27.953420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-44169 BELL-CVE-2026-44169 2026-10-03T23:28:28.149163+00:00

Affected: Alpaquita:25: mariadb, Alpaquita:stream: mariadb

 https://cve.radiocsirt.org/vuln/bit-mariadb-2026-44169 BIT-mariadb-2026-44169 — MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions 2026-10-03T23:28:28.149224+00:00

Affected: Bitnami: mariadb

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/euvd-2026-326972 EUVD-2026-326972 2026-10-03T23:28:28.149253+00:00 EUVD-2026-326972 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44169 fkie_cve-2026-44169 2026-10-03T23:28:28.149267+00:00

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 openSUSE-SU-2026:10897-1 — libmariadbd-devel-11.8.7-1.1 on GA media 2026-10-03T23:28:28.149290+00:00

libmariadbd-devel-11.8.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:25143 RHSA-2026:25143 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T23:28:28.149313+00:00

mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine mariadb: mbstream: Unauthorized file creation via path traversal mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries urllib3: urllib3: Denial of Service due to excessive HTTP response decompression mariadb: Arbitrary code execution via improper parameter validation during SST mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

 https://cve.radiocsirt.org/vuln/rlsa-2026:33412 RLSA-2026:33412 — Important: galera and mariadb11.8 security, bug fix, and enhancement update 2026-10-03T23:28:28.149343+00:00

Affected: Rocky Linux:10: galera, Rocky Linux:10: mariadb11.8

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

Bug Fix(es) and Enhancement(s):

* Rebase MariaDB 11.8 to 11.8.8 in Rocky Linux10 (JIRA:Rocky Linux-183084)

* Rebase Galera to 26.4.27 in Rocky Linux10 (JIRA:Rocky Linux-183259)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 SUSE-SU-2026:22095-1 — Security update for mariadb 2026-10-03T23:28:28.149375+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44169 UBUNTU-CVE-2026-44169 2026-10-03T23:28:28.149399+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1597 WID-SEC-W-2026-1597 — MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T23:28:28.149430+00:00

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.