PatchTheCVEMariaDB vulnerabilities and fixes
CVEs that mention MariaDB, ranked by priority. 2 tracked.
MariaDB has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-10-21. Highest priority: CVE-2026-114509 (score 46/100).
- CVE-2026-114509 CRITICAL 9.2 Laravel is a web application framework
- CVE-2024-47091 HIGH 7.8 DOWNGRADE Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL)
FAQ
How do I fix MariaDB vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is MariaDB being exploited right now?
None of the tracked MariaDB CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which MariaDB CVE should I patch first?
CVE-2026-114509 currently ranks highest (46/100): Laravel is a web application framework.
Newest MariaDB CVEs
- CVE-2026-114509 CRITICAL 9.2 2026-10-21: Laravel is a web application framework
- CVE-2024-47091 HIGH 7.8 2026-05-13: Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p
Live from the NVD (last 120 days)
Loading…