CVE-2026-44168

EUVD-2026-36514

12.06.2026, 18:16

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

OS Command Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8 HIGH	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Affected Products (NVD)

Vendor	Product	Version
mariadb	mariadb	10.6.1 ≤ 𝑥 < 10.6.26
mariadb	mariadb	10.11.1 ≤ 𝑥 < 10.11.17
mariadb	mariadb	11.4.1 ≤ 𝑥 < 11.4.11
mariadb	mariadb	11.8.1 ≤ 𝑥 < 11.8.7
mariadb	mariadb	12.3.1

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Enterprise Linux 10	3:10.11.18-1.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	3:11.8.8-1.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	8100020260616102001.489197e6 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	9080020260612104015.rhel9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	9080020260612103452.rhel9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	11.8.8-1.hum1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	10.11.18-1.hum1 ≤ 𝑥 < *	ADP

Debian Releases

Debian Product

Codename

mariadb

bookworm	1:10.11.18-0+deb12u1 fixed
forky	1:11.8.8-1 fixed
sid	1:11.8.8-1 fixed
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

mariadb

jammy	dne
noble	needs-triage
questing	ignored
resolute	Fixed 1:11.8.6-5ubuntu0.1 released

mariadb-10.0

jammy	dne
noble	dne
questing	dne
resolute	dne

mariadb-10.1

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

mariadb-10.3

focal	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne

mariadb-10.6

jammy	needs-triage
noble	dne
questing	dne
resolute	dne

openSUSE / SLES Releases

openSUSE Product

Release

libmariadbd-devel

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

libmariadbd19

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

mariadb

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

mariadb-client

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

mariadb-errormessages

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

mariadb-tools

suse enterprise sap 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise sap 15 SP7	11.8.8-150700.3.15.1 fixed
suse enterprise server 15 SP4	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP5	10.6.27-150400.3.46.1 fixed
suse enterprise server 15 SP6	10.11.18-150600.4.20.1 fixed
suse enterprise server 15 SP7	11.8.8-150700.3.15.1 fixed

Amazon Linux Releases

Amazon Package

Release

mariadb1011

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-backup

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-backup-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-client-utils

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-common

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-connect-engine

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-connect-engine-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-cracklib-password-check

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-cracklib-password-check-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-debugsource

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-devel

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-errmsg

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-gssapi-server

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-gssapi-server-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-oqgraph-engine

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-oqgraph-engine-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-pam

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-pam-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-rocksdb-engine

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-rocksdb-engine-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-server

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-server-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-server-utils

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-server-utils-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-sphinx-engine

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-sphinx-engine-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-test

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb1011-test-debuginfo

Amazon Linux 2023

3:10.11.18-1.amzn2023.0.1

fixed

mariadb114

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-backup

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-backup-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-client-utils

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-common

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-connect-engine

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-connect-engine-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-cracklib-password-check

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-cracklib-password-check-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-debugsource

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-devel

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-errmsg

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-gssapi-server

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-gssapi-server-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-oqgraph-engine

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-oqgraph-engine-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-pam

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-pam-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-rocksdb-engine

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-rocksdb-engine-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-server

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-server-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-server-utils

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-server-utils-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-sphinx-engine

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-sphinx-engine-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-test

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

mariadb114-test-debuginfo

Amazon Linux 2023

3:11.4.12-1.amzn2023.0.1

fixed

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Vulnerability Media Exposure

[GERMAN] MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
Published: 2026-05-19T22:00:00+00:00

References

https://github.com/MariaDB/server/security/advisories/GHSA-vwf7-w26c-9w5h

https://jira.mariadb.org/browse/MDEV-39413

https://access.redhat.com/errata/RHSA-2026:25143

https://access.redhat.com/errata/RHSA-2026:25145

https://access.redhat.com/errata/RHSA-2026:33093

https://access.redhat.com/errata/RHSA-2026:33412

https://access.redhat.com/errata/RHSA-2026:33464

https://access.redhat.com/errata/RHSA-2026:33481

https://access.redhat.com/errata/RHSA-2026:33482

https://access.redhat.com/security/cve/CVE-2026-44168

https://bugzilla.redhat.com/show_bug.cgi?id=2488450

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44168.json