Is MariaDB 10.11.15 affected?
Nov 6, 2025 · Release notes ↗
17 known vulnerabilities affect 10.11.15 (highest CVSS 10.0).
70 newer releases in its track, up to 13.1.1. What changed up to 13.1.1
Vulnerabilities affecting 10.11.15
- 10.0 CVE-2026-49261 MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notif… fixed in 10.11.18
- 9.8 CVE-2026-44170 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 10.11.17
- 8.5 CVE-2026-107815 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundar… fixed in 10.11.19
- 8.4 CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster d… fixed in 10.11.19
- 8.4 CVE-2026-107814 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service acco… fixed in 10.11.19
- 8.0 CVE-2026-107821 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, an… fixed in 10.11.19
- 8.0 CVE-2026-48163 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, duri… fixed in 10.11.18
- 8.0 CVE-2026-48165 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a hi… fixed in 10.11.18
- 8.0 CVE-2026-44168 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, duri… fixed in 10.11.17
- 7.2 CVE-2026-107823 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded ne… fixed in 10.11.19
- 6.5 CVE-2026-35549 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user… fixed in 11.4.10
- 6.4 CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privileg… fixed in 10.11.19
- 6.4 CVE-2026-107816 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing em… fixed in 10.11.19
- 6.3 CVE-2026-44171 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbst… fixed in 10.11.17
- 5.0 CVE-2026-44173 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 10.11.17
- 4.4 CVE-2026-107817 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables cont… fixed in 10.11.19
- 4.3 CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated dat…
Newer releases
| 13.1.1 | Sep 14, 2026 | 10.11.15 → 13.1.1 |
| 13.0.2 | Sep 14, 2026 | 10.11.15 → 13.0.2 |
| 13.0.1 | May 29, 2026 | 10.11.15 → 13.0.1 |
| 12.3.3 | Aug 24, 2026 | 10.11.15 → 12.3.3 |
| 12.3.2 | May 28, 2026 | 10.11.15 → 12.3.2 |
| 12.3.1 | Feb 12, 2026 | 10.11.15 → 12.3.1 |
| 12.2.2 | Feb 12, 2026 | 10.11.15 → 12.2.2 |
| 12.2.1 | Nov 21, 2025 | 10.11.15 → 12.2.1 |
| 12.1.2 | Nov 18, 2025 | 10.11.15 → 12.1.2 |
| 12.1.1 | Aug 7, 2025 | 10.11.15 → 12.1.1 |
| 12.0.2 | Aug 7, 2025 | 10.11.15 → 12.0.2 |
| 12.0.1 | Jun 5, 2025 | 10.11.15 → 12.0.1 |
| 11.8.9 | Aug 24, 2026 | 10.11.15 → 11.8.9 |
| 11.8.8 | May 27, 2026 | 10.11.15 → 11.8.8 |
| 11.8.7 | May 14, 2026 | 10.11.15 → 11.8.7 |