https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:51:42.646225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:43505 ALSA-2026:43505 — Important: mariadb-connector-c security update 2026-10-03T19:51:42.820133+00:00

Affected: AlmaLinux:10: mariadb-connector-c, AlmaLinux:10: mariadb-connector-c-config, AlmaLinux:10: mariadb-connector-c-devel, AlmaLinux:10: mariadb-connector-c-doc, AlmaLinux:10: mariadb-connector-c-test

The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.

Security Fix(es):

* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-14964 bdu:2026-14964 2026-10-03T19:51:42.820202+00:00 bdu:2026-14964 https://cve.radiocsirt.org/vuln/bell-cve-2026-44172 BELL-CVE-2026-44172 2026-10-03T19:51:42.820220+00:00

Affected: Alpaquita:23: mariadb, Alpaquita:25: mariadb, Alpaquita:stream: mariadb

 https://cve.radiocsirt.org/vuln/bit-mariadb-2026-44172 BIT-mariadb-2026-44172 — MariaDB: mysql_real_escape_string() incorrectly handled big5 2026-10-03T19:51:42.820241+00:00

Affected: Bitnami: mariadb

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

 https://cve.radiocsirt.org/vuln/euvd-2026-370202 EUVD-2026-370202 2026-10-03T19:51:42.820263+00:00 EUVD-2026-370202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44172 fkie_cve-2026-44172 2026-10-03T19:51:42.820274+00:00

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

 https://cve.radiocsirt.org/vuln/oesa-2026-3197 OESA-2026-3197 — mariadb-connector-c security update 2026-10-03T19:51:42.820297+00:00

Affected: openEuler:22.03-LTS-SP4: mariadb-connector-c, openEuler:24.03-LTS-SP1: mariadb-connector-c, openEuler:24.03-LTS-SP3: mariadb-connector-c, openEuler:24.03-LTS-SP4: mariadb-connector-c, openEuler:20.03-LTS-SP4: mariadb-connector-c

This package is used for connecting C/C++ programs to MariaDB and MySQL database. Security Fix(es):

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.(CVE-2026-44172)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 openSUSE-SU-2026:10897-1 — libmariadbd-devel-11.8.7-1.1 on GA media 2026-10-03T19:51:42.820327+00:00

libmariadbd-devel-11.8.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-217 PYSEC-2026-217 2026-10-03T19:51:42.820349+00:00

Affected: PyPI: mariadb

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

 https://cve.radiocsirt.org/vuln/rhsa-2026:30135 RHSA-2026:30135 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T19:51:42.820368+00:00

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

 https://cve.radiocsirt.org/vuln/rlsa-2026:43505 RLSA-2026:43505 — Important: mariadb-connector-c security update 2026-10-03T19:51:42.820384+00:00

Affected: Rocky Linux:10: mariadb-connector-c

The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.

Security Fix(es):

* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 SUSE-SU-2026:22095-1 — Security update for mariadb 2026-10-03T19:51:42.820406+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44172 UBUNTU-CVE-2026-44172 2026-10-03T19:51:42.820436+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1597 WID-SEC-W-2026-1597 — MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T19:51:42.820464+00:00

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.