Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-107814

MariaDB server is a community developed fork of MySQL server

Risk score
54/100
CVSS
8.4 v3.1
Exploit chance (30 days)
0.3%
Published
9 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup do…
Affected
Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Fix
Upgrade Mariadb to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3 or 13.0.2 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: MariadbTHE FLAWSTHE FIXCVE-2026-107814MariaDB server is a communitydeveloped fork of MySQLserverCVSS 8.4 · EPSS 0%CVE-2026-92262MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85746MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85748MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%Upgrade Mariadb10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 ·12.3.3 · 13.0.2or later on your release lineWho is exposedMariadb before 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, 13.0.2AMBER · PATCH THIS WEEKMariadbMariaDB server is a communitydeveloped fork of MySQL server.From 10.6.1 until 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, and 13.0.2,the #mysql50# bypass prefix isaffected because it allows the#mysql50# prefix to bypass…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-732 (CWE-732)37 other warnings in 30 days →Same productEarlier Mariadb warnings11 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Mariadb: Amber, patch this week. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name usi…

The flaws

  • CVE-2026-107814: MariaDB server is a community developed fork of MySQL server (CVSS 8.4 · EPSS 0%)
  • CVE-2026-92262: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85746: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85748: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)

The fix

Upgrade Mariadb: 10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 · 12.3.3 · 13.0.2 or later on your release line

Who is exposed: Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.4 high

References

Original description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Last activity 9 Oct 2026. Patch Forecast updates every hour.