PT-2026-46039 · Mariadb Foundation+1 · Mariadb+1

L3Tchupkt · CVE-2026-49261 · Published 2026-06-02 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MariaDB versions prior to 11.8.8 MariaDB versions prior to 11.4.12 MariaDB versions prior to 10.11.18 MariaDB versions prior to 10.6.27

Description A security issue exists in MariaDB. Technical details regarding the exploitation of this flaw are currently embargoed.

Recommendations Update to version 11.8.8 Update to version 11.4.12 Update to version 10.11.18 Update to version 10.6.27

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALSA-2026:33093

ALSA-2026:33412

ALSA-2026:33464

ALSA-2026:33481

BIT-MARIADB-2026-49261

BIT-MARIADB-MIN-2026-49261

BIT-MYSQL-CLIENT-2026-49261

CVE-2026-49261

ECHO-DF2B-C938-96C6

GHSA-3P3M-4X7C-P4PW

OESA-2026-2732

OESA-2026-2734

OPENSUSE-SU-2026:10934-1

OPENSUSE-SU-2026:20933-1

RHSA-2026:25143

RHSA-2026:25145

RHSA-2026:33412

RHSA-2026:33464

RHSA-2026:33481

RHSA-2026:33482

SUSE-SU-2026:22095-1

SUSE-SU-2026:2282-1

SUSE-SU-2026:2284-1

SUSE-SU-2026:2330-1

USN-8536-1

Affected Products

Mariadb

Rocky Linux

References · 100

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/49xxx/CVE-2026-49261.json · Exploit
• https://github.com/MariaDB/server/security/advisories/GHSA-3p3m-4x7c-p4pw · Vendor Advisory
• https://osv.dev/vulnerability/USN-8536-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-48165 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-33481.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2026-49261 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:25145 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2732 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-49261 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-33412.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-33093.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30693 · Security Note
• https://access.redhat.com/errata/RHSA-2026:25143 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22095-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2330-1 · Vendor Advisory