Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-107823

MariaDB server is a community developed fork of MySQL server

Risk score
54/100
CVSS
7.2 v3.1
Exploit chance (30 days)
0.7%
Published
9 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted usern…
Affected
Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Fix
Upgrade Mariadb to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3 or 13.0.2 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: MariadbTHE FLAWSTHE FIXCVE-2026-107823MariaDB server is a communitydeveloped fork of MySQLserverCVSS 7.2 · EPSS 1%CVE-2026-92262MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85746MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85748MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%Upgrade Mariadb10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 ·12.3.3 · 13.0.2or later on your release lineWho is exposedMariadb before 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, 13.0.2AMBER · PATCH THIS WEEKMariadbMariaDB server is a communitydeveloped fork of MySQL server.From 10.6.1 until 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, and 13.0.2,the #mysql50# bypass prefix isaffected because it allows the#mysql50# prefix to bypass…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-116 (CWE-116)34 other warnings in 30 days →Same productEarlier Mariadb warnings11 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Mariadb: Amber, patch this week. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name usi…

The flaws

  • CVE-2026-107823: MariaDB server is a community developed fork of MySQL server (CVSS 7.2 · EPSS 1%)
  • CVE-2026-92262: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85746: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85748: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)

The fix

Upgrade Mariadb: 10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 · 12.3.3 · 13.0.2 or later on your release line

Who is exposed: Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 7.2 high

References

Original description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Last activity 9 Oct 2026. Patch Forecast updates every hour.