Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MariaDB — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting MariaDB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

MariaDB serves as a widely deployed open-source relational database management system, powering critical business applications and data storage solutions. Historically, it has faced vulnerabilities across multiple classes, including remote code execution, cross-site scripting, and privilege escalation, with 11 CVEs currently documented. The platform implements security features like role-based access control and data-at-rest encryption, though notable incidents have included authentication bypass flaws and insecure default configurations. Organizations deploying MariaDB must prioritize timely patching and hardening, as its widespread adoption makes it a persistent target for exploitation. The database's security posture remains a critical consideration for enterprises relying on it for sensitive data management.

Top products by MariaDB: MariaDB server
CVE ID Title CVSS Severity Published
CVE-2026-48165 MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side — server CWE-78 8.0 High 2026-06-12
CVE-2026-48163 MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) — server CWE-78 8.0 High 2026-06-12
CVE-2026-44173 MariaDB: FILE privilege was not checked for subqueries in the FROM clause — server CWE-863 5.0 Medium 2026-06-12
CVE-2026-44172 MariaDB: mysql_real_escape_string() incorrectly handled big5 — server CWE-89 6.9 Medium 2026-06-12
CVE-2026-44171 MariaDB: path traversal in mbstream — server CWE-22 6.3 Medium 2026-06-12
CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions — server CWE-863 4.3 Medium 2026-06-12
CVE-2026-44168 MariaDB: wsrep SST unsafe parameter handling on the donor side — server CWE-78 8.0 High 2026-06-12
CVE-2026-44170 MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL — server CWE-78 6.3 Medium 2026-06-12
CVE-2026-49261 MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` — server CWE-78 10.0 Critical 2026-06-11
CVE-2026-35549 MariaDB Server 安全漏洞 — MariaDB CWE-789 6.5 Medium 2026-04-03
CVE-2026-32710 Heap-based Buffer Overflow in MariaDB — server CWE-122 8.6 High 2026-03-20
CVE-2025-13699 MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability — MariaDB CWE-22 9.8AI Critical AI 2025-12-23
CVE-2023-52968 MariaDB 安全漏洞 — MariaDB CWE-696 4.9 Medium 2025-03-08
CVE-2023-52969 MariaDB 安全漏洞 — MariaDB CWE-1038 4.9 Medium 2025-03-08
CVE-2023-52971 MariaDB 安全漏洞 — MariaDB CWE-1038 4.9 Medium 2025-03-08
CVE-2023-52970 MariaDB 安全漏洞 — MariaDB CWE-1038 4.9 Medium 2025-03-08
CVE-2022-24052 MariaDB 输入验证错误漏洞 — MariaDB CWE-122 7.8 - 2022-02-18
CVE-2022-24051 MariaDB 格式化字符串错误漏洞 — MariaDB CWE-134 7.8 - 2022-02-18
CVE-2022-24050 MariaDB 资源管理错误漏洞 — MariaDB CWE-416 7.8 - 2022-02-18
CVE-2022-24048 MariaDB 输入验证错误漏洞 — MariaDB CWE-121 7.8 - 2022-02-18

This page lists every published CVE security advisory associated with MariaDB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.