Threats tagged 'bit-mariadb-2026-86047'

1 threat

Threats tagged 'bit-mariadb-2026-86047'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.3%	CVE-2026-86047server · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in… High7.7EPSS 0.3%2026-10-16CVE Database V5CVE-2026-86047 MariaDB server versions from 10.6.1 up to but not including 10.6.28, 10.11.1 up to 10.11.19, 11.4.1 up to 11.4.13, 11.8.1 up to 11.8.9, 12.3.1 up to 12.3.3, and 13.0.1 up to 13.0.2 are affected by an SQL injection vulnerability. The issue arises because SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump commands do not consistently quote identifiers and values when serializing SQL, allowing a low-privileged attacker to inject SQL commands via crafted object identifiers or values. This vulnerability is fixed in the stated versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. EPSS 0.3%Vulnerability MariaDB #cwe-89 #bit-mariadb-2026-86047 #bitnami	CVE Database V5	2026-10-16

Showing 1–1 of 1 result