Topic

MariaDB: news, advisories and analysis

3 articlesUpdated 18 Oct 2026

CyberSecureToday covers MariaDB across 3 articles published between 18 Oct 2026 and 18 Oct 2026. The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity.

Stories on MariaDB most often intersect with Database Security, HackerOne and CONNECT Engine, with Technology, Cloud & SaaS the most affected sector. The most recent story, “MariaDB CONNECT Storage Engine Flaw Bypassed FILE Privilege and secure_file_priv Controls”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
MariaDB CONNECT Storage Engine Flaw Bypassed FILE Privilege and secure_file_priv Controls
Missing authorization checks in MariaDB CONNECT file UDFs allowed authenticated users with basic SELECT permissions to read and write arbitrary server files.
Daniel Okafor18 Oct 202613 min read
ThreatsBanking & FintechHigh
MariaDB DROP PACKAGE Defect Leaves Orphaned Grants in mysql.procs_priv Enabling Privilege Escalation
A catalog cleanup omission in MariaDB's PL/SQL package engine left orphaned grants in mysql.procs_priv, allowing low-privilege users to hijack administrative packages.
CST Editorial Desk18 Oct 202613 min read
ThreatsCloud & SaaSCritical
MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read
A critical exploit chain in MariaDB combined a cursor-array use-after-free with a geospatial memory disclosure to achieve command execution from low-privilege accounts.
CST Editorial Desk18 Oct 202616 min read

Latest coverage

MariaDB CONNECT Storage Engine Flaw Bypassed FILE Privilege and secure_file_priv Controls

MariaDB DROP PACKAGE Defect Leaves Orphaned Grants in mysql.procs_priv Enabling Privilege Escalation

MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read