en
MariaDB is a database software provider and lead developer of MariaDB Server, an open-source relational database originally created as a MySQL-compatible fork. It provides community software, enterprise database offerings, long-term releases, and support for organizations operating production workloads.
As of 10/25/2026, MariaDB recorded 16 security vulnerabilities in the last 90 days across 1 products, including 10 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, server had the most security vulnerabilities in the MariaDB ecosystem, with 16 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86047MariaDB: Insufficient quoting in mariadb-dump and SHOW commandsCVE-2026-85745MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.CVE-2026-85748MariaDB: Use-after-free with a large number of SYS_REFCURSOR'sCVE-2026-85746MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsCVE-2026-92262MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.439 Results | Page 1 of 44
| SeverityMedium |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |