CVE-2026-107818

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-107818
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

8.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.7 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e Patch
https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 Release Notes
https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5 Vendor Advisory
https://jira.mariadb.org/browse/MDEV-40629 Issue Tracking
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
History

14 Oct 2026, 14:12

Type Values Removed Values Added
References () https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e - () https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e - Patch
References () https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 - () https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 - () https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 - () https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 - () https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 - () https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 - () https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 - Release Notes
References () https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5 - () https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5 - Vendor Advisory
References () https://jira.mariadb.org/browse/MDEV-40629 - () https://jira.mariadb.org/browse/MDEV-40629 - Issue Tracking
CPE cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
First Time Mariadb
Mariadb mariadb

09 Oct 2026, 18:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-10-09 18:17

Updated : 2026-10-14 14:12

NVD link : CVE-2026-107818

Mitre link : CVE-2026-107818

CVE.ORG link : CVE-2026-107818

JSON object : View

Products Affected

mariadb

  • mariadb
CWE
CWE-15

External Control of System or Configuration Setting