Critical severity10.0NVD Advisory· Published Jun 11, 2026· Updated Jun 11, 2026
CVE-2026-49261
CVE-2026-49261
Description
MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with wsrep_notify_cmd enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable wsrep_notify_cmd.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
42- osv-coords41 versionspkg:bitnami/mariadbpkg:bitnami/mariadb-minpkg:bitnami/mysql-clientpkg:rpm/almalinux/galerapkg:rpm/almalinux/Judypkg:rpm/almalinux/mariadbpkg:rpm/almalinux/mariadb11.8pkg:rpm/almalinux/mariadb11.8-backuppkg:rpm/almalinux/mariadb11.8-client-utilspkg:rpm/almalinux/mariadb11.8-commonpkg:rpm/almalinux/mariadb11.8-develpkg:rpm/almalinux/mariadb11.8-embeddedpkg:rpm/almalinux/mariadb11.8-embedded-develpkg:rpm/almalinux/mariadb11.8-errmsgpkg:rpm/almalinux/mariadb11.8-gssapi-serverpkg:rpm/almalinux/mariadb11.8-oqgraph-enginepkg:rpm/almalinux/mariadb11.8-pampkg:rpm/almalinux/mariadb11.8-serverpkg:rpm/almalinux/mariadb11.8-server-galerapkg:rpm/almalinux/mariadb11.8-server-utilspkg:rpm/almalinux/mariadb11.8-testpkg:rpm/almalinux/mariadb-backuppkg:rpm/almalinux/mariadb-client-utilspkg:rpm/almalinux/mariadb-commonpkg:rpm/almalinux/mariadb-develpkg:rpm/almalinux/mariadb-embeddedpkg:rpm/almalinux/mariadb-embedded-develpkg:rpm/almalinux/mariadb-errmsgpkg:rpm/almalinux/mariadb-gssapi-serverpkg:rpm/almalinux/mariadb-oqgraph-enginepkg:rpm/almalinux/mariadb-pampkg:rpm/almalinux/mariadb-serverpkg:rpm/almalinux/mariadb-server-galerapkg:rpm/almalinux/mariadb-server-utilspkg:rpm/almalinux/mariadb-testpkg:rpm/opensuse/mariadb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/mariadb&distro=openSUSE%20Tumbleweedpkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
>= 10.6.1, < 10.6.27+ 40 more
- (no CPE)range: >= 10.6.1, < 10.6.27
- (no CPE)range: >= 10.6.1, < 10.6.27
- (no CPE)range: >= 10.6.1, < 10.6.27
- (no CPE)range: < 26.4.27-1.el10_2
- (no CPE)range: < 1.0.5-18.module_el8.10.0+3794+c6a66d65
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:11.8.8-1.el10_2
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 3:10.11.18-1.el10_2.alma.1
- (no CPE)range: < 11.8.8-160000.1.1
- (no CPE)range: < 11.8.8-1.1
- (no CPE)range: < 11.8.8-150700.3.15.1
- (no CPE)range: < 11.8.8-150700.3.15.1
- (no CPE)range: < 11.8.8-160000.1.1
- (no CPE)range: < 11.8.8-160000.1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.