Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
| Date | Total | Labels |
|---|
| 2026-06-06 | 1 | Patch1 |
| 2026-06-10 | 1 | General1 |
MariaDBに重大な脆弱性(CVE-2026-3494,CVE-2026-44168,CVE-2026-44170,CVE-2026-44171,CVE-2026-44172,CVE-2026-44173) https://rocket-boys.co.jp/security-measures-lab/mariadb-critical-vulnerabilities-2026/ #セキュリティ対策Lab #security #securitynews
Post summary
The post merely announces that several MariaDB CVEs exist, without providing additional technical details, exploitation evidence, or mitigation information.
openSUSE and SUSE Linux Enterprise Server 15 SP6 issued MariaDB security fixes for CVE-2026-3494, CVE-2026-34303 and four other flaws rated critical on 5 June 2026, according to LinuxSecurity. https://threatcluster.io/cluster/critical-vulnerabilities-in-mariadb-affecting-opensuse-and-s-b8e6c1cf
Post summary
openSUSE and SUSE Linux Enterprise Server 15 SP6 released critical MariaDB patches for CVE-2026-3494, CVE-2026-34303, and four other flaws; no PoC, exploit, or active exploitation is mentioned.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | amazon | aurora_mysql | - | - | - |
| App | amazon | aurora_mysql | 3.11.0 | - | - |
| App | amazon | relational_database_service | - | mariadb | - |
| App | amazon | relational_database_service | - | mysql | - |
| App | mariadb | mariadb | - | - | - |