# CVE-2026-92262: MariaDB server table name encoding bypass via #mysql50# prefix

Source: https://junglewise.ai/threats/cve-2026-92262-mariadb-server-is-a-community-developed-fork-of-mysql-server-from  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-16. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-92262 · Severity: critical · CVSS 9.9 · Published 2026-10-16

MariaDB is a widely-used open source database server. The #mysql50# prefix, intended for backward compatibility with older MySQL versions, can be abused to bypass table name encoding restrictions. An attacker with database access can exploit this to access files under legacy unencoded names, leading to database crashes, data corruption, unauthorized data access, or arbitrary code execution.

Technologies: [MariaDB Server](https://junglewise.ai/threats/technologies/mariadb-mariadb-server). Vendors: [Mariadb](https://junglewise.ai/threats/vendors/mariadb).

## Quick answers

**Is CVE-2026-92262 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92262 being exploited in the wild.

**How severe is CVE-2026-92262?** Critical severity, with a CVSS score of 9.9, published 16 October 2026.

**Which products and versions are affected?** MariaDB Server 10.6.1 through 10.6.27, 10.11.0 through 10.11.18, 11.4.0 through 11.4.12, 11.8.0 through 11.8.8, 12.3.0 through 12.3.2, 13.0.0 through 13.0.1.

**Is there a fix for CVE-2026-92262?** Yes: fixed in MariaDB Server 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-92262 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-92262?** Check whether you run MariaDB Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in MariaDB Server 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2

## Technical details

The vulnerability exists in how MariaDB handles the #mysql50# prefix in table names, allowing an attacker to bypass normal filesystem encoding mechanisms. By crafting table names with the #mysql50# prefix, an authenticated database user can access tables and files under their unencoded names, potentially corrupting data or executing code. The fix restricts #mysql50# prefix usage to only legacy tables that cannot be decoded from filenames without it and prevents creation of new tables with this prefix.

## Affected products

- MariaDB MariaDB Server 10.6.1 through 10.6.27, 10.11.0 through 10.11.18, 11.4.0 through 11.4.12, 11.8.0 through 11.8.8, 12.3.0 through 12.3.2, 13.0.0 through 13.0.1

## Timeline

- 2026-10-16: disclosed

## References

- [https://github.com/MariaDB/server/commit/574ba66b2d6c5d71db83d416677876e9b592858e](https://github.com/MariaDB/server/commit/574ba66b2d6c5d71db83d416677876e9b592858e)
- [https://github.com/MariaDB/server/commit/f277eefa424850a8cba5c2371406047f6395e8bb](https://github.com/MariaDB/server/commit/f277eefa424850a8cba5c2371406047f6395e8bb)

## Related threats

- [MariaDB ALTER TABLE filename encoding bypass in CONVERT PARTITION](https://junglewise.ai/threats/cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server)
- [MariaDB GRANT PROXY authorization bypass with empty password](https://junglewise.ai/threats/cve-2026-97380-mariadb-server-is-a-community-developed-fork-of-mysql-server-from)
- [MariaDB SQL injection in SHOW CREATE and mariadb-dump](https://junglewise.ai/threats/cve-2026-86047-mariadb-server-is-a-community-developed-fork-of-mysql-server-from)
- [MariaDB CONNECT engine file access bypass in JSON UDFs](https://junglewise.ai/threats/cve-2026-85985-mariadb-server-is-a-community-developed-fork-of-mysql-server-from)
- [MariaDB use-after-free in SYS_REFCURSOR cursor handling](https://junglewise.ai/threats/cve-2026-85748-mariadb-server-is-a-community-developed-fork-of-mysql-server-from)