DeutschShown in its original language — a full translation is planned for a future version.
MariaDB Connectors: Mehrere Schwachstellen
view advisory published 2026-08-30
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MariaDB Connectors ausnutzen, um SQL-Injection-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten offenzulegen oder zu manipulieren.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55860US | —OT elevated | — | ||
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication p… | ||||
| CVE-2026-55859US | — | — | ||
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the a… | ||||
| CVE-2026-55858US | — | — | ||
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes pr… | ||||
| CVE-2026-55857US | —OT elevated | — | ||
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coe… | ||||
| CVE-2026-55856US | — | — | ||
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects wit… | ||||
| CVE-2026-55855US | — | — | ||
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js pe… | ||||
| CVE-2026-55854US | —OT elevated | — | ||
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js ca… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:83082 vom 2026-10-15external
- GitHub Security Advisory GHSA-42r5-vhpq-m858 vom 2026-08-30external
- GitHub Security Advisory GHSA-5rqc-86vf-g8r2 vom 2026-08-30external
- GitHub Security Advisory GHSA-c857-9x2m-cvh2 vom 2026-08-30external
- GitHub Security Advisory GHSA-g5xc-5w98-jfvm vom 2026-08-30external
- GitHub Security Advisory GHSA-g9jj-cgmh-9f38 vom 2026-08-30external
- GitHub Security Advisory GHSA-qxvw-fvwx-5cp7 vom 2026-08-30external
- GitHub Security Advisory GHSA-xvr9-35cr-46v9 vom 2026-08-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan