Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 15

Количество 15

ubuntu логотип

CVE-2026-44171

около 2 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 6.3
EPSS: Низкий
redhat логотип

CVE-2026-44171

около 2 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2026-44171

около 2 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 6.3
EPSS: Низкий
debian логотип

CVE-2026-44171

около 2 месяцев назад

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-9pjh-5hhw-65v9

2 месяца назад

path traversal in mbstream

CVSS3: 6.3
EPSS: Низкий
rocky логотип

RLSA-2026:33482

26 дней назад

Important: mariadb:10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33464

около 1 месяца назад

Important: mariadb:10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33093

26 дней назад

Important: mariadb10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33481

26 дней назад

Important: mariadb:11.8 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33412

26 дней назад

Important: galera and mariadb11.8 security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-33412

15 дней назад

ELSA-2026-33412: galera and mariadb11.8 security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2282-1

около 2 месяцев назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2284-1

около 2 месяцев назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20933-1

около 2 месяцев назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2330-1

около 2 месяцев назад

Security update for mariadb

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-44171

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 6.3
0%
Низкий
около 2 месяцев назад
redhat логотип
CVE-2026-44171

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 5.8
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2026-44171

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths, but a specially crafted archive could have caused mbstream to create files outside of the target-dir path. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CVSS3: 6.3
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2026-44171

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 6.3
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-9pjh-5hhw-65v9

path traversal in mbstream

CVSS3: 6.3
0%
Низкий
2 месяца назад
rocky логотип
RLSA-2026:33482

Important: mariadb:10.11 security, bug fix, and enhancement update

26 дней назад
rocky логотип
RLSA-2026:33464

Important: mariadb:10.11 security, bug fix, and enhancement update

около 1 месяца назад
rocky логотип
RLSA-2026:33093

Important: mariadb10.11 security, bug fix, and enhancement update

26 дней назад
rocky логотип
RLSA-2026:33481

Important: mariadb:11.8 security, bug fix, and enhancement update

26 дней назад
rocky логотип
RLSA-2026:33412

Important: galera and mariadb11.8 security, bug fix, and enhancement update

26 дней назад
oracle-oval логотип
ELSA-2026-33412

ELSA-2026-33412: galera and mariadb11.8 security, bug fix, and enhancement update (IMPORTANT)

15 дней назад
suse-cvrf логотип
SUSE-SU-2026:2282-1

Security update for mariadb

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2284-1

Security update for mariadb

около 2 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20933-1

Security update for mariadb

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2330-1

Security update for mariadb

около 2 месяцев назад

Уязвимостей на страницу