by Kastro CVE-2026-49261
MariaDB server — MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
Description · from the CVE record
MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.
Affected
ProductAffectedFixed inSource
server>= 10.6.1, < 10.6.27–CNA
server>= 10.11.1, < 10.11.18–CNA
server>= 11.4.1, < 11.4.12–CNA
server>= 11.8.1, < 11.8.8–CNA
server= 12.3.1–CNA
Red Hat Enterprise Linux 10see advisory3:10.11.18-1.el10_2redhat-SADP
Red Hat Enterprise Linux 10see advisory3:11.8.8-1.el10_2redhat-SADP
Red Hat Enterprise Linux 10.0 Extended Update Supportsee advisory3:10.11.18-1.el10_0redhat-SADP
Red Hat Enterprise Linux 8see advisory8100020260616102001.489197e6redhat-SADP
Red Hat Enterprise Linux 9see advisory9080020260612104015.rhel9redhat-SADP
Red Hat Enterprise Linux 9see advisory9080020260612103452.rhel9redhat-SADP
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionssee advisory9040020260804103423.rhel9redhat-SADP
Scores by source
GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total