Logo
vulnerabilityCVE-2026-44172
Name
CVE-2026-44172
Source
NVD ( link)Debian ( link)
Description
MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libmariadb
Exploitable

Vulnerability Ratings#


6.9
CVSSv4
9.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
10.11.17
Not Affected
buildroot
master
10.11.17
Not Affected
openwrt
master
3.4.8-r3
Exploitable
openwrt
master
11.8.3-r1
Not Affected
yocto
kirkstone
10.7.8
Not Affected
yocto
master
11.4.12
Not Affected
yocto
scarthgap
10.11.16
Not Affected