Patch Forecast
Amber warning
Patch this week.

CVE-2026-92262

MariaDB server is a community developed fork of MySQL server

Risk score
70/100
CVSS
9.9 v3.1
Exploit chance (30 days)
0.7%
Published
16 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name usi…
Affected
Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Fix
Upgrade Mariadb to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3 or 13.0.2 (whichever matches your release line), or later.
Exploitation
No known exploitation

Story map

Story map: MariadbTHE FLAWSTHE FIXCVE-2026-92262MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85746MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-85748MariaDB server is a communitydeveloped fork of MySQLserverCVSS 9.9 · EPSS 1%CVE-2026-107815MariaDB server is a communitydeveloped fork of MySQLserverCVSS 8.5 · EPSS 1%Upgrade Mariadb10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 ·12.3.3 · 13.0.2or later on your release lineWho is exposedMariadb before 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, 13.0.2AMBER · PATCH THIS WEEKMariadbMariaDB server is a communitydeveloped fork of MySQL server.From 10.6.1 until 10.6.28, 10.11.19,11.4.13, 11.8.9, 12.3.3, and 13.0.2,the #mysql50# bypass prefix isaffected because it allows the#mysql50# prefix to bypass…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-706 (CWE-706)15 other warnings in 30 days →Same productEarlier Mariadb warnings11 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Mariadb: Amber, patch this week. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name usi…

The flaws

  • CVE-2026-92262: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85746: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-85748: MariaDB server is a community developed fork of MySQL server (CVSS 9.9 · EPSS 1%)
  • CVE-2026-107815: MariaDB server is a community developed fork of MySQL server (CVSS 8.5 · EPSS 1%)

The fix

Upgrade Mariadb: 10.6.28 · 10.11.19 · 11.4.13 · 11.8.9 · 12.3.3 · 13.0.2 or later on your release line

Who is exposed: Mariadb before 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2

Where it stands

  • No known exploitation

Connects to

Why it is Amber

  • CVSS 9.9 critical

References

Original description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name using the #mysql50# prefix, then use a #mysql50# table name to access files under their legacy unencoded name and cause crashes, data corruption, data exfiltration, or remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Last activity 16 Oct 2026. Patch Forecast updates every hour.