CVE-2026-44173

EUVD-2026-36518
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
mariadbmariadb
10.6.1 ≤
𝑥
< 10.6.26
mariadbmariadb
10.11.1 ≤
𝑥
< 10.11.17
mariadbmariadb
11.4.1 ≤
𝑥
< 11.4.11
mariadbmariadb
11.8.1 ≤
𝑥
< 11.8.7
mariadbmariadb
12.3.1
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
3:10.11.18-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
3:11.8.8-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260616102001.489197e6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9080020260612104015.rhel9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9080020260612103452.rhel9 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
11.8.8-1.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
10.11.18-1.hum1 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
mariadb
bookworm
1:10.11.18-0+deb12u1
fixed
forky
1:11.8.8-1
fixed
sid
1:11.8.8-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb
jammy
dne
noble
needs-triage
questing
ignored
resolute
Fixed 1:11.8.6-5ubuntu0.1
released
mariadb-10.0
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.1
bionic
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.3
focal
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.6
jammy
needs-triage
noble
dne
questing
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libmariadbd-devel
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
libmariadbd19
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-client
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-errormessages
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
mariadb-tools
suse enterprise sap 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise sap 15 SP7
11.8.8-150700.3.15.1
fixed
suse enterprise server 15 SP4
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP5
10.6.27-150400.3.46.1
fixed
suse enterprise server 15 SP6
10.11.18-150600.4.20.1
fixed
suse enterprise server 15 SP7
11.8.8-150700.3.15.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
mariadb1011
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-backup
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-backup-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-client-utils
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-common
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-connect-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-connect-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-cracklib-password-check
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-cracklib-password-check-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-debugsource
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-devel
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-errmsg
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-gssapi-server
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-gssapi-server-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-oqgraph-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-oqgraph-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-pam
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-pam-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-rocksdb-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-rocksdb-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-utils
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-server-utils-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-sphinx-engine
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-sphinx-engine-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-test
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb1011-test-debuginfo
Amazon Linux 2023
3:10.11.18-1.amzn2023.0.1
fixed
mariadb114
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-backup-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-client-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-common
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-connect-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-cracklib-password-check-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-debugsource
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-devel
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-errmsg
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-gssapi-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-oqgraph-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-pam-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-rocksdb-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-server-utils-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-sphinx-engine-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
mariadb114-test-debuginfo
Amazon Linux 2023
3:11.4.12-1.amzn2023.0.1
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc
https://jira.mariadb.org/browse/MDEV-39493
https://access.redhat.com/errata/RHSA-2026:25143
https://access.redhat.com/errata/RHSA-2026:25145
https://access.redhat.com/errata/RHSA-2026:33093
https://access.redhat.com/errata/RHSA-2026:33412
https://access.redhat.com/errata/RHSA-2026:33464
https://access.redhat.com/errata/RHSA-2026:33481
https://access.redhat.com/errata/RHSA-2026:33482
https://access.redhat.com/security/cve/CVE-2026-44173
https://bugzilla.redhat.com/show_bug.cgi?id=2488460
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44173.json