Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the curl command line without proper sanitizing. This allows the user to execute shell commands on the server. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-06-10 | 1 | Disclosure1 |
| 2026-06-18 | 1 | Disclosure1 |
| 2026-06-20 | 1 | General1 |
| 2026-06-22 | 1 | Disclosure1 |
MariaDBに深刻度「緊急」のOSコマンドインジェクション脆弱性（CVE-2026-44170）が公開。 対象環境では、Windows上でCONNECTエンジン＋REST機能を利用している場合、入力処理の不備により攻撃者がサーバー上で任意のシェルコマンドを実行できる可能性があります。
Post summary
MariaDB CVE-2026-44170, an OS command injection vulnerability rated 'critical', has been disclosed, detailing the affected Windows environment and input flaw, but no PoC, exploit, patch, or active exploitation is mentioned.
【3軸解説】「MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性（CVE-2026-44170）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post offers a general, three‑axis analysis of the CVE‑2026‑44170 MariaDB OS command injection, highlighting its background, purpose, and effect, without reference to PoC, exploitation, or mitigation.
【3軸解説】「MariaDB Corporation Ab.のMariaDBにおけるOS コマンドインジェクションの脆弱性（CVE-2026-44170）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/
Post summary
The post gives a concise overview of CVE‑2026‑44170 as an OS command‑injection flaw, but does not provide any PoC, exploit code, active exploitation, patch, or debunking information.
MariaDBに重大な脆弱性(CVE-2026-3494,CVE-2026-44168,CVE-2026-44170,CVE-2026-44171,CVE-2026-44172,CVE-2026-44173) https://rocket-boys.co.jp/security-measures-lab/mariadb-critical-vulnerabilities-2026/ #セキュリティ対策Lab #security #securitynews
Post summary
The post announces several critical MariaDB CVEs and links to a blog article discussing them, but offers no proof‑of‑concept, exploit details, or remediation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mariadb | mariadb | - | - | - |
| App | mariadb | mariadb | 12.3.1 | - | - |