{"schema_version":1,"title":"MariaDB Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in MariaDB Server: 0 in the last 7 days and 16 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-102523, was published on 5 November 2026. 8 vulnerabilities in the last four weeks, level on the four before (8). 3 critical against 0.","url":"https://junglewise.ai/threats/technologies/mariadb-mariadb-server","json_url":"https://junglewise.ai/threats/technologies/mariadb-mariadb-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/mariadb-mariadb-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":8,"all_time":16,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":8,"last_90_days":16,"last_365_days":16},"latest":[{"cve":"CVE-2026-102523","cvss":8,"slug":"cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB ALTER TABLE filename encoding bypass in CONVERT PARTITION","severity":"high","exploited":false,"published_at":"2026-11-05T16:17:23.727+00:00","url":"https://junglewise.ai/threats/cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-97380","cvss":8.8,"slug":"cve-2026-97380-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB GRANT PROXY authorization bypass with empty password","severity":"high","exploited":false,"published_at":"2026-10-16T17:18:02.013+00:00","url":"https://junglewise.ai/threats/cve-2026-97380-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-92262","cvss":9.9,"slug":"cve-2026-92262-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB server table name encoding bypass via #mysql50# prefix","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:52.71+00:00","url":"https://junglewise.ai/threats/cve-2026-92262-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-86047","cvss":7.7,"slug":"cve-2026-86047-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB SQL injection in SHOW CREATE and mariadb-dump","severity":"high","exploited":false,"published_at":"2026-10-16T17:17:52.063+00:00","url":"https://junglewise.ai/threats/cve-2026-86047-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85985","cvss":5.4,"slug":"cve-2026-85985-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB CONNECT engine file access bypass in JSON UDFs","severity":"medium","exploited":false,"published_at":"2026-10-16T17:17:51.62+00:00","url":"https://junglewise.ai/threats/cve-2026-85985-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85748","cvss":9.9,"slug":"cve-2026-85748-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB use-after-free in SYS_REFCURSOR cursor handling","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:51.303+00:00","url":"https://junglewise.ai/threats/cve-2026-85748-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85746","cvss":9.9,"slug":"cve-2026-85746-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB ST_AsText buffer overflow in nested GeometryCollections","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:51.167+00:00","url":"https://junglewise.ai/threats/cve-2026-85746-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85745","cvss":4.3,"slug":"cve-2026-85745-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB buffer over-read in ST_Area WKB parsing","severity":"medium","exploited":false,"published_at":"2026-10-16T17:17:51.02+00:00","url":"https://junglewise.ai/threats/cve-2026-85745-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-107823","cvss":7.2,"epss":0.0071,"slug":"cve-2026-107823-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB server privilege escalation in view FRM parser","severity":"high","exploited":false,"published_at":"2026-10-09T18:17:04.19+00:00","url":"https://junglewise.ai/threats/cve-2026-107823-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107822","cvss":6.4,"epss":0.0048,"slug":"cve-2026-107822-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB ACL cache privilege escalation via role collision","severity":"medium","exploited":false,"published_at":"2026-10-09T18:17:04.03+00:00","url":"https://junglewise.ai/threats/cve-2026-107822-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107821","cvss":8,"epss":0.0076,"slug":"cve-2026-107821-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB server buffer overflow in FRM metadata validation","severity":"high","exploited":false,"published_at":"2026-10-09T18:17:03.86+00:00","url":"https://junglewise.ai/threats/cve-2026-107821-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107818","cvss":8.4,"epss":0.0034,"slug":"cve-2026-107818-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB environment injection via wsrep bootstrap in service file","severity":"high","exploited":false,"published_at":"2026-10-09T18:17:03.373+00:00","url":"https://junglewise.ai/threats/cve-2026-107818-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107817","cvss":4.4,"epss":0.0014,"slug":"cve-2026-107817-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB mysql_json plugin out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-09T18:17:03.22+00:00","url":"https://junglewise.ai/threats/cve-2026-107817-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107816","cvss":6.4,"epss":0.0031,"slug":"cve-2026-107816-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB qc_info plugin out-of-bounds read on embedded null bytes","severity":"medium","exploited":false,"published_at":"2026-10-09T18:17:03.06+00:00","url":"https://junglewise.ai/threats/cve-2026-107816-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107815","cvss":8.5,"epss":0.009,"slug":"cve-2026-107815-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB CONNECT engine buffer overflow in DOS table","severity":"high","exploited":false,"published_at":"2026-10-09T17:16:45.97+00:00","url":"https://junglewise.ai/threats/cve-2026-107815-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107814","cvss":8.4,"epss":0.0028,"slug":"cve-2026-107814-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB privilege escalation via dot-files in home directory","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:26.15+00:00","url":"https://junglewise.ai/threats/cve-2026-107814-mariadb-server-is-a-community-developed-fork-of-mysql-server"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-10-12","critical":3,"exploited":0,"vulnerabilities":7},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Mariadb","slug":"mariadb","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/mariadb"},{"name":"Mariadb Connector/Node.js","slug":"connector-node-js","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/connector-node-js"},{"name":"MariaDB Connector/J","slug":"mariadb-connector-j","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/mariadb-connector-j"}],"technology":{"hub":true,"name":"MariaDB Server","slug":"mariadb-mariadb-server","vendor":{"hub":true,"name":"Mariadb","slug":"mariadb","url":"https://junglewise.ai/threats/vendors/mariadb"},"aliases":["mariadb-server-1"],"category":"database","homepage":"https://mariadb.org","description":"Open-source relational database server compatible with MySQL.","url":"https://junglewise.ai/threats/technologies/mariadb-mariadb-server"},"most_severe":[{"cve":"CVE-2026-92262","cvss":9.9,"slug":"cve-2026-92262-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB server table name encoding bypass via #mysql50# prefix","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:52.71+00:00","url":"https://junglewise.ai/threats/cve-2026-92262-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85748","cvss":9.9,"slug":"cve-2026-85748-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB use-after-free in SYS_REFCURSOR cursor handling","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:51.303+00:00","url":"https://junglewise.ai/threats/cve-2026-85748-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-85746","cvss":9.9,"slug":"cve-2026-85746-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB ST_AsText buffer overflow in nested GeometryCollections","severity":"critical","exploited":false,"published_at":"2026-10-16T17:17:51.167+00:00","url":"https://junglewise.ai/threats/cve-2026-85746-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-97380","cvss":8.8,"slug":"cve-2026-97380-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB GRANT PROXY authorization bypass with empty password","severity":"high","exploited":false,"published_at":"2026-10-16T17:18:02.013+00:00","url":"https://junglewise.ai/threats/cve-2026-97380-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"},{"cve":"CVE-2026-107815","cvss":8.5,"epss":0.009,"slug":"cve-2026-107815-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB CONNECT engine buffer overflow in DOS table","severity":"high","exploited":false,"published_at":"2026-10-09T17:16:45.97+00:00","url":"https://junglewise.ai/threats/cve-2026-107815-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107818","cvss":8.4,"epss":0.0034,"slug":"cve-2026-107818-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB environment injection via wsrep bootstrap in service file","severity":"high","exploited":false,"published_at":"2026-10-09T18:17:03.373+00:00","url":"https://junglewise.ai/threats/cve-2026-107818-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107814","cvss":8.4,"epss":0.0028,"slug":"cve-2026-107814-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB privilege escalation via dot-files in home directory","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:26.15+00:00","url":"https://junglewise.ai/threats/cve-2026-107814-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-107821","cvss":8,"epss":0.0076,"slug":"cve-2026-107821-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB server buffer overflow in FRM metadata validation","severity":"high","exploited":false,"published_at":"2026-10-09T18:17:03.86+00:00","url":"https://junglewise.ai/threats/cve-2026-107821-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-102523","cvss":8,"slug":"cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server","title":"MariaDB ALTER TABLE filename encoding bypass in CONVERT PARTITION","severity":"high","exploited":false,"published_at":"2026-11-05T16:17:23.727+00:00","url":"https://junglewise.ai/threats/cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server"},{"cve":"CVE-2026-86047","cvss":7.7,"slug":"cve-2026-86047-mariadb-server-is-a-community-developed-fork-of-mysql-server-from","title":"MariaDB SQL injection in SHOW CREATE and mariadb-dump","severity":"high","exploited":false,"published_at":"2026-10-16T17:17:52.063+00:00","url":"https://junglewise.ai/threats/cve-2026-86047-mariadb-server-is-a-community-developed-fork-of-mysql-server-from"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}