CVE-2026-44172
Published: May 26, 2026Last modified: June 3, 2026
Description
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | mariadb | Fixed (10.6.27-r0) |
| 25 LTS | mariadb | Fixed (11.4.11-r0) | |
| Stream | mariadb | Fixed (11.8.7-r0) |