Is MariaDB 11.8.4 affected?
Nov 6, 2025 · Release notes ↗
19 known vulnerabilities affect 11.8.4 (highest CVSS 10.0).
17 newer releases in its track, up to 13.1.1. What changed up to 13.1.1
Vulnerabilities affecting 11.8.4
- 10.0 CVE-2026-49261 MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notif… fixed in 11.8.8
- 9.8 CVE-2026-44170 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 11.8.7
- 8.5 CVE-2026-107815 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundar… fixed in 11.8.9
- 8.5 CVE-2026-32710 MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function.… fixed in 11.8.6
- 8.4 CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster d… fixed in 11.8.9
- 8.4 CVE-2026-107814 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service acco… fixed in 11.8.9
- 8.0 CVE-2026-107821 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, an… fixed in 11.8.9
- 8.0 CVE-2026-48163 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, duri… fixed in 11.8.8
- 8.0 CVE-2026-48165 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a hi… fixed in 11.8.8
- 8.0 CVE-2026-44168 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, duri… fixed in 11.8.7
- 7.2 CVE-2026-107823 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded ne… fixed in 11.8.9
- 6.5 CVE-2026-35549 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user… fixed in 11.8.6
- 6.4 CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privileg… fixed in 11.8.9
- 6.4 CVE-2026-107816 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing em… fixed in 11.8.9
- 6.3 CVE-2026-44171 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbst… fixed in 11.8.7
- 5.0 CVE-2026-44173 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 11.8.7
- 4.4 CVE-2026-107817 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables cont… fixed in 11.8.9
- 4.3 CVE-2026-44169 MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a ro… fixed in 11.8.7
- 4.3 CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated dat…
Newer releases
| 13.1.1 | Sep 14, 2026 | 11.8.4 → 13.1.1 |
| 13.0.2 | Sep 14, 2026 | 11.8.4 → 13.0.2 |
| 13.0.1 | May 29, 2026 | 11.8.4 → 13.0.1 |
| 12.3.3 | Aug 24, 2026 | 11.8.4 → 12.3.3 |
| 12.3.2 | May 28, 2026 | 11.8.4 → 12.3.2 |
| 12.3.1 | Feb 12, 2026 | 11.8.4 → 12.3.1 |
| 12.2.2 | Feb 12, 2026 | 11.8.4 → 12.2.2 |
| 12.2.1 | Nov 21, 2025 | 11.8.4 → 12.2.1 |
| 12.1.2 | Nov 18, 2025 | 11.8.4 → 12.1.2 |
| 12.1.1 | Aug 7, 2025 | 11.8.4 → 12.1.1 |
| 12.0.2 | Aug 7, 2025 | 11.8.4 → 12.0.2 |
| 12.0.1 | Jun 5, 2025 | 11.8.4 → 12.0.1 |
| 11.8.9 | Aug 24, 2026 | 11.8.4 → 11.8.9 |
| 11.8.8 | May 27, 2026 | 11.8.4 → 11.8.8 |
| 11.8.7 | May 14, 2026 | 11.8.4 → 11.8.7 |