- Description
- MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name using the #mysql50# prefix, then use a #mysql50# table name to access files under their legacy unencoded name and cause crashes, data corruption, data exfiltration, or remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
- Products
- mariadb
CVSS 3.1
- Type
- Secondary
- Base score
- 9.9
- Impact score
- 6
- Exploitability score
- 3.1
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- security-advisories@github.com
- CWE-706
- Hype score
- Not currently trending
Warning: 3 critical vulnerabilities in #MariaDB Server may allow low-privileged attackers to access or corrupt data, cause crashes, or execute code. CVE-2026-92262, CVE-2026-85746 & CVE-2026-85748 CVSS(3.1): 9.9. Read the advisory https://t.co/pDJqanQFw0 and #Patch #Patch #Pa
@CCBalert
19 Oct 2026
291 Impressions
0 Retweets
2 Likes
0 Bookmarks
1 Reply
0 Quotes
ExploitGrid Daily Digest šØ Top CVEs: CVE-2026-94169 (CVSS: 10) Theme-one CVE-2026-95182 (CVSS: 10) CVE-2026-85746 (CVSS: 9.9) MariaDB CVE-2026-85748 (CVSS: 9.9) MariaDB CVE-2026-92262 (CVSS: 9.9) MariaDB ..š§µš
@exploitgrid
17 Oct 2026
64 Impressions
1 Retweet
0 Likes
0 Bookmarks
1 Reply
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6A6667AA-6A82-49E2-894B-318569872468",
"versionEndExcluding": "10.6.28",
"versionStartIncluding": "10.6.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C18A44B6-CEEF-47D7-9D60-04E6EBAFC785",
"versionEndExcluding": "10.11.19",
"versionStartIncluding": "10.11.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "47070DA5-F754-4FE1-957A-375C39D9029E",
"versionEndExcluding": "11.4.13",
"versionStartIncluding": "11.4.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "39AD11EC-57BE-4D2B-9A7C-E667E23A6940",
"versionEndExcluding": "11.8.9",
"versionStartIncluding": "11.8.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E6988F1C-2D11-431B-BBE4-3AA8483627C8",
"versionEndExcluding": "12.3.3",
"versionStartIncluding": "12.3.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:13.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E46FBE57-06D5-489E-9ECE-333F5F9AFD06",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]