{"schema_version":1,"title":"Mariadb vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Mariadb: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-55860, was published on 28 August 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/mariadb","json_url":"https://junglewise.ai/threats/vendors/mariadb.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/mariadb","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":7,"last_90_days":7,"last_365_days":8},"latest":[{"cve":"CVE-2026-55860","cvss":5.9,"epss":0.0023,"slug":"cve-2026-55860-mariadb-r2dbc-cleartext-password-disclosure-to-mitm","title":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not g","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:09.153+00:00","url":"https://junglewise.ai/threats/cve-2026-55860-mariadb-r2dbc-cleartext-password-disclosure-to-mitm"},{"cve":"CVE-2026-55859","cvss":5.9,"epss":0.0049,"slug":"cve-2026-55859-mariadb-r2dbc-charset-confusion-leading-to-sql-injection","title":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes an","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:09.007+00:00","url":"https://junglewise.ai/threats/cve-2026-55859-mariadb-r2dbc-charset-confusion-leading-to-sql-injection"},{"cve":"CVE-2026-55858","cvss":5.9,"epss":0.0057,"slug":"cve-2026-55858-mariadb-java-client-charset-confusion-encoding-mismatch","title":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.827+00:00","url":"https://junglewise.ai/threats/cve-2026-55858-mariadb-java-client-charset-confusion-encoding-mismatch"},{"cve":"CVE-2026-55857","cvss":5.9,"epss":0.0031,"slug":"cve-2026-55857-mariadb-connector-j-cleartext-password-transmission-in-pam","title":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.68+00:00","url":"https://junglewise.ai/threats/cve-2026-55857-mariadb-connector-j-cleartext-password-transmission-in-pam"},{"cve":"CVE-2026-55855","cvss":6.5,"epss":0.0047,"slug":"cve-2026-55855-mariadb-connector-node-js-sql-injection-in-buffer-parameter","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.353+00:00","url":"https://junglewise.ai/threats/cve-2026-55855-mariadb-connector-node-js-sql-injection-in-buffer-parameter"},{"cve":"CVE-2026-55854","cvss":5.9,"epss":0.0042,"slug":"cve-2026-55854-mariadb-connector-node-js-cleartext-password-transmission-in-pam","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.203+00:00","url":"https://junglewise.ai/threats/cve-2026-55854-mariadb-connector-node-js-cleartext-password-transmission-in-pam"},{"cve":"CVE-2026-55215","cvss":7.5,"epss":0.0057,"slug":"cve-2026-55215-mariadb-connector-node-js-cleartext-password-disclosure-to-mitm","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.","severity":"high","exploited":false,"published_at":"2026-08-28T20:18:26.353+00:00","url":"https://junglewise.ai/threats/cve-2026-55215-mariadb-connector-node-js-cleartext-password-disclosure-to-mitm"},{"cve":"CVE-2026-44172","cvss":3.1,"epss":0.0066,"slug":"cve-2026-44172-mariadb-libmariadb-sql-injection-in-mysql-real-escape-string","title":"MariaDB libmariadb SQL injection in mysql_real_escape_string using big5","severity":"low","exploited":false,"published_at":"2026-06-12T18:16:34.123+00:00","url":"https://junglewise.ai/threats/cve-2026-44172-mariadb-libmariadb-sql-injection-in-mysql-real-escape-string"}],"vendor":{"hub":true,"name":"Mariadb","slug":"mariadb","homepage":"https://mariadb.com/","description":"Open-source relational database management system derived from MySQL.","url":"https://junglewise.ai/threats/vendors/mariadb"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-55215","cvss":7.5,"epss":0.0057,"slug":"cve-2026-55215-mariadb-connector-node-js-cleartext-password-disclosure-to-mitm","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.","severity":"high","exploited":false,"published_at":"2026-08-28T20:18:26.353+00:00","url":"https://junglewise.ai/threats/cve-2026-55215-mariadb-connector-node-js-cleartext-password-disclosure-to-mitm"},{"cve":"CVE-2026-55855","cvss":6.5,"epss":0.0047,"slug":"cve-2026-55855-mariadb-connector-node-js-sql-injection-in-buffer-parameter","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.353+00:00","url":"https://junglewise.ai/threats/cve-2026-55855-mariadb-connector-node-js-sql-injection-in-buffer-parameter"},{"cve":"CVE-2026-55858","cvss":5.9,"epss":0.0057,"slug":"cve-2026-55858-mariadb-java-client-charset-confusion-encoding-mismatch","title":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.827+00:00","url":"https://junglewise.ai/threats/cve-2026-55858-mariadb-java-client-charset-confusion-encoding-mismatch"},{"cve":"CVE-2026-55859","cvss":5.9,"epss":0.0049,"slug":"cve-2026-55859-mariadb-r2dbc-charset-confusion-leading-to-sql-injection","title":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes an","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:09.007+00:00","url":"https://junglewise.ai/threats/cve-2026-55859-mariadb-r2dbc-charset-confusion-leading-to-sql-injection"},{"cve":"CVE-2026-55854","cvss":5.9,"epss":0.0042,"slug":"cve-2026-55854-mariadb-connector-node-js-cleartext-password-transmission-in-pam","title":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.203+00:00","url":"https://junglewise.ai/threats/cve-2026-55854-mariadb-connector-node-js-cleartext-password-transmission-in-pam"},{"cve":"CVE-2026-55857","cvss":5.9,"epss":0.0031,"slug":"cve-2026-55857-mariadb-connector-j-cleartext-password-transmission-in-pam","title":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:08.68+00:00","url":"https://junglewise.ai/threats/cve-2026-55857-mariadb-connector-j-cleartext-password-transmission-in-pam"},{"cve":"CVE-2026-55860","cvss":5.9,"epss":0.0023,"slug":"cve-2026-55860-mariadb-r2dbc-cleartext-password-disclosure-to-mitm","title":"MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not g","severity":"medium","exploited":false,"published_at":"2026-08-28T23:17:09.153+00:00","url":"https://junglewise.ai/threats/cve-2026-55860-mariadb-r2dbc-cleartext-password-disclosure-to-mitm"},{"cve":"CVE-2026-44172","cvss":3.1,"epss":0.0066,"slug":"cve-2026-44172-mariadb-libmariadb-sql-injection-in-mysql-real-escape-string","title":"MariaDB libmariadb SQL injection in mysql_real_escape_string using big5","severity":"low","exploited":false,"published_at":"2026-06-12T18:16:34.123+00:00","url":"https://junglewise.ai/threats/cve-2026-44172-mariadb-libmariadb-sql-injection-in-mysql-real-escape-string"}],"generated_at":"2026-09-26T13:07:00.120236+00:00","technologies":[{"name":"Mariadb","slug":"mariadb","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/mariadb"},{"name":"Mariadb Connector/Node.js","slug":"connector-node-js","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/connector-node-js"}]}