https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:55:06.206048+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-44173 BELL-CVE-2026-44173 2026-10-03T19:55:06.310376+00:00

Affected: Alpaquita:23: mariadb, Alpaquita:25: mariadb, Alpaquita:stream: mariadb

 https://cve.radiocsirt.org/vuln/bit-mariadb-2026-44173 BIT-mariadb-2026-44173 — MariaDB: FILE privilege was not checked for subqueries in the FROM clause 2026-10-03T19:55:06.310442+00:00

Affected: Bitnami: mariadb

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/euvd-2026-343637 EUVD-2026-343637 2026-10-03T19:55:06.310471+00:00 EUVD-2026-343637 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44173 fkie_cve-2026-44173 2026-10-03T19:55:06.310484+00:00

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 openSUSE-SU-2026:10897-1 — libmariadbd-devel-11.8.7-1.1 on GA media 2026-10-03T19:55:06.310508+00:00

libmariadbd-devel-11.8.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:25143 RHSA-2026:25143 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T19:55:06.310530+00:00

mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine mariadb: mbstream: Unauthorized file creation via path traversal mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries urllib3: urllib3: Denial of Service due to excessive HTTP response decompression mariadb: Arbitrary code execution via improper parameter validation during SST mariadb: Arbitrary code execution via global system variable manipulation by a high-privileged user mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

 https://cve.radiocsirt.org/vuln/rlsa-2026:33093 RLSA-2026:33093 — Important: mariadb10.11 security, bug fix, and enhancement update 2026-10-03T19:55:06.310558+00:00

Affected: Rocky Linux:10: mariadb10.11

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

* mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

Bug Fix(es) and Enhancement(s):

* Rebase MariaDB 10.11 to 10.11.18 in Rocky Linux10 (JIRA:Rocky Linux-183086)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 SUSE-SU-2026:22095-1 — Security update for mariadb 2026-10-03T19:55:06.310584+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44173 UBUNTU-CVE-2026-44173 2026-10-03T19:55:06.310605+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1597 WID-SEC-W-2026-1597 — MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T19:55:06.310634+00:00

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.