Mariadb Server vulnerabilities

• devolutions server MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION CVE-2026-102523 Fix available 8.0 HighOctober 23, 2026
• devolutions server, mariadb +1 more MariaDB: Insufficient quoting in mariadb-dump and SHOW commands CVE-2026-86047 Fix available 7.7 HighOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. CVE-2026-85745 Fix available 4.3 MediumOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: Use-after-free with a large number of SYS_REFCURSOR's CVE-2026-85748 Fix available 9.9 CriticalOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections CVE-2026-85746 Fix available 9.9 CriticalOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges CVE-2026-97380 Fix available 8.8 HighOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: Unauthorized file access via CONNECT engine UDFs CVE-2026-85985 Fix available 5.4 MediumOctober 16, 2026
• devolutions server, mariadb +1 more MariaDB: privilege escalation via incorrect view frm parsing CVE-2026-107823 Fix available 7.2 HighOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: database privilege escalation via user / role name collision in the acl cache CVE-2026-107822 Fix available 6.4 MediumOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: insufficient validation of binary frm data when opening a table CVE-2026-107821 Public exploitFix available 8.0 HighOctober 9, 2026
• devolutions server MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure CVE-2026-107819 Fix available 5.9 MediumOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: environment injection via wsrep bootstrap in the mariadb.service file CVE-2026-107818 Fix available 8.4 HighOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: mysql_json plugin OOB reads CVE-2026-107817 Fix available 4.4 MediumOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: `qc_info` plugin can do OOB reads if query contains \0 CVE-2026-107816 Fix available 6.4 MediumOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: one byte OOB write in DOS tables of the CONNECT engine CVE-2026-107815 Fix available 8.5 HighOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: Insecure $HOME in MariaDB rpm packages CVE-2026-107814 Fix available 8.4 HighOctober 9, 2026
• devolutions server, mariadb +1 more MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. CVE-2026-92262 Public exploitFix available 9.9 CriticalOctober 8, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 more MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` CVE-2026-49261 Fix available 10.0 CriticalJune 2, 2026
• devolutions server, mariadb, red hat enterprise linux 7 +6 more +8 more MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side CVE-2026-48165 Fix available 8.0 HighJune 2, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 more MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) CVE-2026-48163 Fix available 8.0 HighJune 2, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 more MariaDB: FILE privilege was not checked for subqueries in the FROM clause CVE-2026-44173 Fix available 5.0 MediumMay 26, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 more MariaDB: mysql_real_escape_string() incorrectly handled big5 CVE-2026-44172 Fix available 6.9 MediumMay 26, 2026
• devolutions server, mariadb +1 more MariaDB: path traversal in mbstream CVE-2026-44171 Fix available 6.3 MediumMay 26, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 more MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL CVE-2026-44170 Fix available 6.3 MediumMay 26, 2026
• devolutions server, mariadb +1 more MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions CVE-2026-44169 Fix available 4.3 MediumMay 26, 2026
• devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 more MariaDB: wsrep SST unsafe parameter handling on the donor side CVE-2026-44168 Fix available 8.0 HighMay 26, 2026
• devolutions server, mariadb +1 more Heap-based Buffer Overflow in MariaDB CVE-2026-32710 Public exploitFix available 8.6 HighMarch 20, 2026