ByteOS Network

NVD Vulnerability Details :

CVE-2026-44173

Received

Source-security-advisories@github.com

Published At-12 Jun, 2026 | 18:16

Updated At-12 Jun, 2026 | 18:16

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.0	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Type: Secondary

Version: 3.1

Base score: 5.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Weaknesses

CWE ID	Type	Source
CWE-863	Primary	security-advisories@github.com

CWE ID: CWE-863

Type: Primary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc	security-advisories@github.com	N/A
https://jira.mariadb.org/browse/MDEV-39493	security-advisories@github.com	N/A

Hyperlink: https://github.com/MariaDB/server/security/advisories/GHSA-667j-m53j-wpmc

Source: security-advisories@github.com

Resource: N/A

Hyperlink: https://jira.mariadb.org/browse/MDEV-39493

Source: security-advisories@github.com

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History