Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-107818

MariaDB server is a community developed fork of MySQL server

Risk score
56/100
CVSS
8.4 v3.1
Exploit chance (30 days)
0.3%
Published
9 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes…
Affected
Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Fix
Upgrade Mariadb to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3 or 13.0.2 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: MariadbTHE FLAWSTHE FIXCVE-2026-107818MariaDB server is a communitydeveloped fork of MySQLserverCVSS 8.4 · EPSS 0%CVE-2026-92262MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85746MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85748MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%Upgrade Mariadb10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 ·12.3.3 · 13.0.2or later on your release lineWho is exposedMariadb before 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, 13.0.2AMBER · PATCH THIS WEEKMariadbMariaDB server is a communitydeveloped fork of MySQL server.From 10.6.1 until 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, and 13.0.2,the #mysql50# bypass prefix isaffected because it allows the#mysql50# prefix to bypass…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-15 (CWE-15)8 other warnings in 30 days →Same productEarlier Mariadb warnings11 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Mariadb: Amber, patch this week. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name usi…

The flaws

  • CVE-2026-107818: MariaDB server is a community developed fork of MySQL server (CVSS 8.4 · EPSS 0%)
  • CVE-2026-92262: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85746: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85748: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)

The fix

Upgrade Mariadb: 10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 · 12.3.3 · 13.0.2 or later on your release line

Who is exposed: Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.4 high

References

Original description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Last activity 9 Oct 2026. Patch Forecast updates every hour.