CVE Watch15 jul 2026

CVE-2026-44168

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to

CVSS

8.0

Alto

EPSS

0.6%

p43

KEV

—

Exploit Today

0-100

Publicado: 12 jun 2026 · Última mod.: 15 jul 2026 · CWE-78

EPSS · 30d

0.5%EPSS · 30 días0.6%

2026-06-302026-07-17

Descripción técnica

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-341978.8 ALT

99.9%

KEV—80Apache ActiveMQ Improper Input Validation Vulnerability3d CVE-2024-121210.0 CRÍ

99.9%

KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability4d CVE-2026-398089.8 CRÍ

99.7%

KEV—80Fortinet FortiSandbox OS Command Injection Vulnerability23h CVE-2022-262589.8 CRÍ

99.6%

KEV—80D-Link DIR-820L Remote Code Execution Vulnerability9d CVE-2026-422718.8 ALT

99.6%

KEV—80BerriAI LiteLLM Command Injection Vulnerability3d CVE-2021-252988.8 ALT

99.5%

KEV—80Nagios XI OS Command Injection9d