Every CVE Search/ Get API key

CVE-2026-3494

MariaDB Server Audit Plugin Comment Handling Bypass

5.3 MediumPublic exploitFix available

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.30%Up 0.3 points since Mar 4, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-778
Updated
2026-11-02
EUVDEUVD-2026-9311 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
EUVD-2026-9311
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-qmjm-438j-w485 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with...

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
GHSA-qmjm-438j-w485
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-778
Updated
2026-11-02
NVD 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-778
Updated
2026-11-02
OSVALPINE-CVE-2026-3494 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
ALPINE-CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVBELL-CVE-2026-3494 4.3
Record
BELL-CVE-2026-3494
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 19 moreShow less
OSV 5.3

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weakness
CWE-778
Updated
2026-11-02
OSVDEBIAN-CVE-2026-3494 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
DEBIAN-CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-2395 5.3

mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.(CVE-2026-3494)

Record
OESA-2026-2395
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-2396 5.3

mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.(CVE-2026-3494)

Record
OESA-2026-2396
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-2397 7.0

mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.(CVE-2025-13699)

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.(CVE-2026-3494)

Record
OESA-2026-2397
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-3494 5.3

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
UBUNTU-CVE-2026-3494
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVAZL-79365 No score

CVE-2026-3494 affecting package mariadb 10.6.24-1

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
AZL-79365
Updated
2026-11-02
OSVAZL-79550 No score

CVE-2026-3494 affecting package mariadb for versions less than 10.11.16-1

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
AZL-79550
Updated
2026-11-02
OSVBIT-mariadb-2026-3494 No score

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
BIT-mariadb-2026-3494
Updated
2026-11-02
OSVBIT-mariadb-min-2026-3494 No score

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
BIT-mariadb-min-2026-3494
Updated
2026-11-02
OSVBIT-mysql-client-2026-3494 No score

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Record
BIT-mysql-client-2026-3494
Updated
2026-11-02
OSVCLSA-2026-1786469793 No score

mariadb: Fix of 2 CVEs

  • CVE-2026-3494: replace the server_audit plugin's hand-rolled SQL parser with thd_sql_command(); emit MYSQL_AUDIT_GENERAL_STATUS inside Prepared_statement::execute; update thd->update_server_status guard in sp_instr_stmt::execute to include audit-enabled path
  • CVE-2026-44171: reject unsafe absolute, leading-dot, and parent-traversal paths during mbstream archive extraction
Record
CLSA-2026-1786469793
Updated
2026-11-02
OSVCLSA-2026-1787212689 No score

mariadb: Fix of CVE-2026-3494

  • CVE-2026-3494: audit plugin implements its own (simple) SQL parser; remove the parser, use thd_sql_command(thd)
Record
CLSA-2026-1787212689
Updated
2026-11-02
OSVopenSUSE-SU-2026:10897-1 No score

libmariadbd-devel-11.8.7-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-11.8.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10897-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20933-1 No score

Security update for mariadb

This update for mariadb fixes the following issues

Update to 11.8.8:

  • CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
  • CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).
  • CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).
  • CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
  • CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441).
  • CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
  • CVE-2026-44171: path traversal in mbstream (bsc#1266439).
  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
  • CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
  • CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
  • CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
  • CVE-2026-49261: unsafe parameter handing in wsrep_notify_cmd (bsc#1267542).

https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8

Record
openSUSE-SU-2026:20933-1
Updated
2026-11-02
OSVSUSE-SU-2026:22095-1 No score

Security update for mariadb

This update for mariadb fixes the following issues

Update to 11.8.8:

  • CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
  • CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).
  • CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).
  • CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
  • CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441).
  • CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
  • CVE-2026-44171: path traversal in mbstream (bsc#1266439).
  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
  • CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
  • CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
  • CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
  • CVE-2026-49261: unsafe parameter handing in wsrep_notify_cmd (bsc#1267542).

https://mariadb.com/docs/release-notes/community-server/11.8/11.8.8 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.8

Record
SUSE-SU-2026:22095-1
Updated
2026-11-02
OSVSUSE-SU-2026:2282-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

Security fixes:

  • CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
  • CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
  • CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
  • CVE-2026-44171: path traversal in mbstream (bsc#1266439).
  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
  • CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
  • CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
  • CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
  • CVE-2026-49261: unsafe parameter handling in wsrep_notify_cmd (bsc#1267542).

Other fixes:

Record
SUSE-SU-2026:2282-1
Updated
2026-11-02
OSVSUSE-SU-2026:2284-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

  • CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
  • CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).
  • CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
  • CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
  • CVE-2026-44171: path traversal in mbstream (bsc#1266439).
  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
  • CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
  • CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
  • CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
  • CVE-2026-49261: unsafe parameter handling in wsrep_notify_cmd (bsc#1267542).

Changes for mariadb:

Record
SUSE-SU-2026:2284-1
Updated
2026-11-02
OSVSUSE-SU-2026:2330-1 No score

Security update for mariadb

This update for mariadb fixes the following issues:

  • CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176).
  • CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435).
  • CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc#1261413).
  • CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side (bsc#1266442).
  • CVE-2026-44169: authorization bypass in role-based routine-level privilege check exposes stored routine definitions (bsc#1266441).
  • CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (bsc#1266440).
  • CVE-2026-44171: path traversal in mbstream (bsc#1266439).
  • CVE-2026-44172: mysql_real_escape_string() incorrectly handled big5 (bsc#1266438).
  • CVE-2026-44173: FILE privilege was not checked for subqueries in the FROM clause (bsc#1266437).
  • CVE-2026-48163: wsrep SST unsafe parameter handling on the donor side (bsc#1266815).
  • CVE-2026-48165: unsafe usage of wsrep_sst_receive_address values on the joiner side (bsc#1266814).
  • CVE-2026-49261: unsafe parameter handling in wsrep_notify_cmd (bsc#1267542).

Changes for mariadb:

Record
SUSE-SU-2026:2330-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mariadb
Alpine:v3.20
 10.7.0 up to 10.11.16-r0
10.11.16-r0
mariadb
Alpine:v3.21
 10.7.0 up to 11.4.10-r0
11.4.10-r0
mariadb
Alpine:v3.22
 10.7.0 up to 11.4.10-r0
11.4.10-r0
mariadb
Alpine:v3.23
 10.7.0 up to 11.4.10-r0
11.4.10-r0
mariadb
Alpine:v3.24
 10.7.0 up to 11.8.6-r0
11.8.6-r0
mariadb
Azure Linux:2
 through 10.6.24-1 None known
mariadb
Azure Linux:3
 before 10.11.16-1
10.11.16-1
mariadb
Alpaquita:23
 10.6.12-r0 up to 10.6.25-r0
10.6.25-r0
mariadb
Alpaquita:25
 11.4.5-r0 up to 11.4.10-r0
11.4.10-r0
mariadb
Alpaquita:stream
 10.11.4-r0 up to 11.8.6-r0
11.8.6-r0
Show 48 moreShow less
Affected packages
PackageAffectedFixed
mariadb
Bitnami
 before 10.6.25, 10.7.0 up to 10.11.16, 11.0.0 up to 11.4.10, 11.5.0 up to 11.8.6
10.6.2510.11.1611.4.1011.8.6
mariadb-min
Bitnami
 before 10.6.25, 10.7.0 up to 10.11.16, 11.0.0 up to 11.4.10, 11.5.0 up to 11.8.6
10.6.2510.11.1611.4.1011.8.6
mysql-client
Bitnami
 before 10.6.25, 10.7.0 up to 10.11.18, 11.0.0 up to 12.0.2
10.6.2510.11.1812.0.2
mariadb
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-backup
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-common
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-embedded
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-embedded-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-errmsg
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-gssapi-server
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-oqgraph-engine
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-pam
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-server
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-server-galera
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-server-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb-test
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3:10.5.29-1.el9_2.alma.1.tuxcare.els4
3:10.5.29-1.el9_2.alma.1.tuxcare.els4
mariadb
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-backup
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-common
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-devel
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-embedded
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-embedded-devel
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-errmsg
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-gssapi-server
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-oqgraph-engine
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-pam
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-server
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-server-galera
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-server-utils
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb-test
TuxCare:AlmaLinux:9.6
 before 3:10.5.29-2.el9_6.tuxcare.els5
3:10.5.29-2.el9_6.tuxcare.els5
mariadb
Debian:12
 before 1:10.11.18-0+deb12u1, plus listed versions
1:10.11.11-0+deb12u11:10.11.13-0+deb12u11:10.11.14-0+deb12u11:10.11.14-0+deb12u21:10.11.3-1
Show 16 moreShow less
1:10.11.3-2~exp11:10.11.4-11:10.11.4-1~deb12u11:10.11.5-11:10.11.5-21:10.11.5-31:10.11.6-0+deb12u11:10.11.6-11:10.11.6-21:10.11.6-2.1~exp11:10.11.7-11:10.11.7-21:10.11.7-31:10.11.7-41:10.11.8-11:10.11.9-0+deb12u1
1:10.11.18-0+deb12u1
mariadb
Debian:13
 before 1:11.8.6-0+deb13u1, plus listed versions
1:11.8.2-11:11.8.3-0+deb13u11:11.8.3-11:11.8.5-11:11.8.5-2
Show 5 moreShow less
1:11.8.5-31:11.8.5-3~exp11:11.8.5-3~exp21:11.8.5-3~exp31:11.8.5-4
1:11.8.6-0+deb13u1
mariadb
Debian:14
 before 1:11.8.6-1, plus listed versions
1:11.8.2-11:11.8.3-11:11.8.5-11:11.8.5-21:11.8.5-3
Show 4 moreShow less
1:11.8.5-3~exp11:11.8.5-3~exp21:11.8.5-3~exp31:11.8.5-4
1:11.8.6-1
mariadb
openEuler:24.03-LTS-SP1
 before 10.5.29-4.oe2403sp1
10.5.29-4.oe2403sp1
mariadb
openEuler:24.03-LTS-SP3
 before 10.5.29-4.oe2403sp3
10.5.29-4.oe2403sp3
mariadb
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 10.5.29-4.oe2403
10.5.29-4.oe2403
mariadb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 12 CVEs
 before 11.8.8-160000.1.1
11.8.8-160000.1.1
mariadb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 12 CVEs
 before 11.8.8-160000.1.1
11.8.8-160000.1.1
mariadb
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 12 CVEs
 before 11.8.8-150700.3.15.1
11.8.8-150700.3.15.1
mariadb
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 12 CVEs
 before 11.8.8-150700.3.15.1
11.8.8-150700.3.15.1
mariadb-10.0
Ubuntu:16.04:LTS
 All versions, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7
Show 9 moreShow less
10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.110.0.36-0ubuntu0.16.04.110.0.38-0ubuntu0.16.04.1
 None known
mariadb-10.1
Ubuntu:18.04:LTS
 All versions, plus listed versions
10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.2
Show 6 moreShow less
1:10.1.40-0ubuntu0.18.04.11:10.1.41-0ubuntu0.18.04.11:10.1.43-0ubuntu0.18.04.11:10.1.44-0ubuntu0.18.04.11:10.1.47-0ubuntu0.18.04.11:10.1.48-0ubuntu0.18.04.1
 None known
mariadb-10.3
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-1
Show 10 moreShow less
1:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.11:10.3.32-0ubuntu0.20.04.11:10.3.34-0ubuntu0.20.04.11:10.3.37-0ubuntu0.20.04.11:10.3.38-0ubuntu0.20.04.11:10.3.39-0ubuntu0.20.04.2
 None known
mariadb-10.6
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:10.6.7-2ubuntu11:10.6.7-2ubuntu1.11:10.6.11-0ubuntu0.22.04.11:10.6.12-0ubuntu0.22.04.11:10.6.16-0ubuntu0.22.04.1
Show 4 moreShow less
1:10.6.18-0ubuntu0.22.04.11:10.6.21-0ubuntu0.22.04.21:10.6.22-0ubuntu0.22.04.11:10.6.23-0ubuntu0.22.04.1
 None known
mariadb
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:10.11.4-11:10.11.5-31:10.11.6-11:10.11.6-21:10.11.7-2ubuntu1
Show 5 moreShow less
1:10.11.7-2ubuntu21:10.11.8-0ubuntu0.24.04.11:10.11.11-0ubuntu0.24.04.21:10.11.13-0ubuntu0.24.04.11:10.11.14-0ubuntu0.24.04.1
 None known
mariadb
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 11.8.7-1.1
11.8.7-1.1
mariadb
openSUSE:Leap 16.0
From an advisory covering 12 CVEs
 before 11.8.8-160000.1.1
11.8.8-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubKelnor/CVE-2026-3494_Verfication2026-05-03

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-3494 is a medium vulnerability (CVSS 5.3) in Mariadb, published March 3, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. Fixed in mariadb 10.11.16-r0.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open