mariadb_server vulnerabilities

CVEs whose affected-version data names the mariadb_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-3494Medium· 4.3PoC

7mo ago

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefi…

▾ TwilightMariaDB Foundation · MariaDB ServerEPSS 0.38%via CVEORG