Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-47847

Quick assessment

Affected
Bitnami bitnami/mariadb-galera
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Bitnami MariaDB Galera是Bitnami公司的一套预构建容器镜像和 Helm Charts，用于在 Kubernetes 等云原生环境中快速部署和管理具备多主同步复制能力的高可用 MariaDB 集群。 Bitnami MariaDB Galera存在信任管理问题漏洞，该漏洞源于Galera复制健康检查用户存在硬编码默认凭据，MARIADB_REPLICATION_USER和MARIADB_REPLICATION_PASSWORD环境变量默认分别为monitor和monitor，且该用

CVSS 5.3 · Medium EPSS 0.31% · P22

Possible ATT&CK Techniques 1 AI

T1078 · Valid Accounts

Affected Version Matrix 6

VendorProduct Version RangeStatus
Bitnami bitnami/mariadb-galera 10.6.0< 10.6.27-photon-5-r0 affected
10.11.0< 10.11.17-photon-5-r1 affected
11.4.0< 11.4.12-photon-5-r0 affected
11.8.0< 11.8.7-photon-5-r1 affected
12.3.0< 12.3.2-photon-5-r0 affected
Bitnami bitnami/mariadb-galera Helm chart < 18.3.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-47847

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default. Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Vulnerability Title
Bitnami MariaDB Galera 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bitnami MariaDB Galera是Bitnami公司的一套预构建容器镜像和 Helm Charts，用于在 Kubernetes 等云原生环境中快速部署和管理具备多主同步复制能力的高可用 MariaDB 集群。 Bitnami MariaDB Galera存在信任管理问题漏洞，该漏洞源于Galera复制健康检查用户存在硬编码默认凭据，MARIADB_REPLICATION_USER和MARIADB_REPLICATION_PASSWORD环境变量默认分别为monitor和monitor，且该用
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Bitnami bitnami/mariadb-galera 10.6.0 ~ 10.6.27-photon-5-r0 -
Bitnami bitnami/mariadb-galera Helm chart 0 ~ 18.3.0 -

II. Public POCs for CVE-2026-47847

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-47847

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-47847 (1)

IV. Related Vulnerabilities

Same vendor: Bitnami
Same weakness: CWE-798

V. Comments for CVE-2026-47847

No comments yet

Leave a comment