Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 14

Количество 14

github логотип

GHSA-7v3p-h23x-8hwv

4 месяца назад

unsafe usage of `wsrep_sst_receive_address` values on the joiner side

CVSS3: 8
EPSS: Низкий
ubuntu логотип

CVE-2026-48165

3 месяца назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 8
EPSS: Низкий
redhat логотип

CVE-2026-48165

3 месяца назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2026-48165

3 месяца назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 8
EPSS: Низкий
debian логотип

CVE-2026-48165

3 месяца назад

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 8
EPSS: Низкий
rocky логотип

RLSA-2026:33482

3 месяца назад

Important: mariadb:10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33464

3 месяца назад

Important: mariadb:10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33093

3 месяца назад

Important: mariadb10.11 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33481

3 месяца назад

Important: mariadb:11.8 security, bug fix, and enhancement update

EPSS: Низкий
rocky логотип

RLSA-2026:33412

3 месяца назад

Important: galera and mariadb11.8 security, bug fix, and enhancement update

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2282-1

4 месяца назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2284-1

4 месяца назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20933-1

3 месяца назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2330-1

3 месяца назад

Security update for mariadb

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-7v3p-h23x-8hwv

unsafe usage of `wsrep_sst_receive_address` values on the joiner side

CVSS3: 8
1%
Низкий
4 месяца назад
ubuntu логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 8
1%
Низкий
3 месяца назад
redhat логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 9.1
1%
Низкий
3 месяца назад
nvd логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 8
1%
Низкий
3 месяца назад
debian логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 8
1%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:33482

Important: mariadb:10.11 security, bug fix, and enhancement update

3 месяца назад
rocky логотип
RLSA-2026:33464

Important: mariadb:10.11 security, bug fix, and enhancement update

3 месяца назад
rocky логотип
RLSA-2026:33093

Important: mariadb10.11 security, bug fix, and enhancement update

3 месяца назад
rocky логотип
RLSA-2026:33481

Important: mariadb:11.8 security, bug fix, and enhancement update

3 месяца назад
rocky логотип
RLSA-2026:33412

Important: galera and mariadb11.8 security, bug fix, and enhancement update

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:2282-1

Security update for mariadb

4 месяца назад
suse-cvrf логотип
SUSE-SU-2026:2284-1

Security update for mariadb

4 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:20933-1

Security update for mariadb

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:2330-1

Security update for mariadb

3 месяца назад

Уязвимостей на страницу