CVE-2026-44173mediumCWE-266CWE-863

CVE-2026-44173: fallo de gravedad media en MariaDB server

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear server+ Monitorear mariadb

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5epss 0.6%
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Productos afectados
MariaDB · server
CVEs relacionadas — MariaDB server

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-49261CRITICALMariaDB server has unsafe parameter handling in `wsrep_notify_cmd`EPSS 1.6%CVE-2026-48165HIGHMariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideEPSS 1.5%CVE-2026-92262CRITICALMariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.EPSS 1.5%CVE-2026-107815HIGHMariaDB: one byte OOB write in DOS tables of the CONNECT engineEPSS 1.4%CVE-2026-44170MEDIUMMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLEPSS 1.3%CVE-2026-97380HIGHMariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegesEPSS 1.3%