VulnSocial

CVE-2026-107815

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-13: 110-13
Referenced assets1 URL
Full discourse1 post
  • The Daily Tech Feed@dailytechonx

    Heads up for DBAs: MariaDB has patched serious vulnerabilities including memory corruption in the CONNECT engine (CVE-2026-107815) and unsafe .frm file handling (CVE-2026-107821) that allow remote code execution and credential theft. Affected branches span 10.6, 10.11, 11.4-11.8, 12.3 and 13.0. Remove unused plugins, tighten FILE privilege, disable partition support if needed, and update to latest versions now. #MariaDB #DatabaseSecurity #RCE #Vulnerability #CVSS #CyberSecurityNews https://thedailytechfeed.com/mariadb-patches-high-severity-flaws-allowing-rce-data-theft/

    0000023
    791 followersView on X

Explore more

Back to dashboard