mariadb vulnerabilities and fixes

Recent CVEs affecting mariadb, with upgrade or downgrade steps. 24 tracked.

mariadb has 24 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 24. Most recent: 2026-10-16. Highest priority: CVE-2026-49261 (score 67/100).

• CVE-2026-49261 CRITICAL 10.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44170 CRITICAL 9.8 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44172 CRITICAL 9.1 DOWNGRADE MITIGATE MariaDB server is a community developed fork of MySQL server
• CVE-2026-48165 HIGH 8.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-48163 HIGH 8.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44168 HIGH 8.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44173 MEDIUM 5.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44171 MEDIUM 6.3 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-44169 MEDIUM 4.3 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-92262 CRITICAL 9.9 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-85745 MEDIUM 4.3 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-85746 CRITICAL 9.9 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-85748 CRITICAL 9.9 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-85985 MEDIUM 5.4 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-86047 HIGH 7.7 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-97380 HIGH 8.8 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107823 HIGH 7.2 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107822 MEDIUM 6.4 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107821 HIGH 8.0 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107818 HIGH 8.4 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107817 MEDIUM 4.4 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107816 MEDIUM 6.4 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107815 HIGH 8.5 UPGRADE MariaDB server is a community developed fork of MySQL server
• CVE-2026-107814 HIGH 8.4 UPGRADE MariaDB server is a community developed fork of MySQL server

FAQ

How do I fix mariadb vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mariadb being exploited right now?

None of the tracked mariadb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mariadb CVE should I patch first?

CVE-2026-49261 currently ranks highest (67/100): MariaDB server is a community developed fork of MySQL server.

RSS feed for mariadb · ← Back to latest CVEs