CVE-Katalog

CVE-2026-92262

Schweregrad: Critical · CVSS 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: Oct 13, 2026, 12:00:00 AM UTC
Updated: Oct 16, 2026, 5:17:52 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.73% · Oct 22, 2026

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue with a table name using the #mysql50# prefix, then use a #mysql50# table name to access files under their legacy unencoded name and cause crashes, data corruption, data exfiltration, or remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	mariadb	sid	`1:11.8.9+ds-4`	fixed
Debian	mariadb	forky	`1:11.8.9+ds-2`	fixed
Debian	mariadb	trixie	`1:11.8.6-0+deb13u1`	vulnerable
Debian	mariadb	bookworm	`1:10.11.18-0+deb12u1`	vulnerable
Debian	mariadb	bookworm-security	`1:10.11.19-0+deb12u1`	vulnerable
Cpe	mariadb	Not reported	Not reported	unknown
Ubuntu	mariadb-10.0	16.04	`10.0.20-0ubuntu0.15.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.22-0ubuntu1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.23-1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.23-2`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.24-7`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.25-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.27-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.28-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.29-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.31-0ubuntu0.16.04.2`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.33-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.34-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.36-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.0	16.04	`10.0.38-0ubuntu0.16.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`10.1.25-1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.29-6`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.34-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.38-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.38-0ubuntu0.18.04.2`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.40-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.41-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.43-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.44-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.47-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.1	18.04	`1:10.1.48-0ubuntu0.18.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.17-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.18-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.19-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.21-2`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.22-1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.22-1ubuntu1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.25-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.29-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.30-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.31-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.32-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.34-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.37-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.38-0ubuntu0.20.04.1`	vulnerable
Ubuntu	mariadb-10.3	20.04	`1:10.3.39-0ubuntu0.20.04.2`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.7-2ubuntu1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.7-2ubuntu1.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.11-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.12-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.16-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.18-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.21-0ubuntu0.22.04.2`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.22-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb-10.6	22.04	`1:10.6.23-0ubuntu0.22.04.1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.4-1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.5-3`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.6-1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.6-2`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.7-2ubuntu1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.7-2ubuntu2`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.8-0ubuntu0.24.04.1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.11-0ubuntu0.24.04.2`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.13-0ubuntu0.24.04.1`	vulnerable
Ubuntu	mariadb	24.04	`1:10.11.14-0ubuntu0.24.04.1`	vulnerable
Ubuntu	mariadb	26.10	`1:11.8.6-5`	vulnerable
Ubuntu	mariadb	26.10	`1:11.8.8-1`	vulnerable
Ubuntu	mariadb	26.10	`1:11.8.9+ds-4ubuntu2`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.3-1build1`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.5-1`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.5-2`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.5-3`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.5-4`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.6-1`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.6-3`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.6-4`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.6-5`	vulnerable
Ubuntu	mariadb	26.04	`1:11.8.6-5ubuntu0.1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	mariadb	source	sid	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	forky	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libmariadb3]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[libmariadbd19]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[libmariadbd-dev]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[libmariadb-dev]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[libmariadb-dev-compat]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-backup]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-client]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-client-core]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-common]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · all · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · all · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-connect]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-cracklib-password-check]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-client]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-server]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-hashicorp-key-management]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-mroonga]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-oqgraph]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-bzip2]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lz4]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzma]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzo]Betroffen
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Betroffen
  nvd · mariadb · debian · bookworm

Weitere Ergebnisse

Beobachtet: Oct 23, 2026, 11:17:50 PM UTC

Referenzen

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]