MariaDB Vulnerability: Denial of Service, Potential Code Execution

CERT-Bund has released a security advisory (WID-SEC-2026-0815) concerning critical vulnerabilities in MariaDB Server versions prior to 11.4.10, 11.8.6, and 12.2.2. The identified flaw, with a CVSS Base Score of 8.5, enables remote, authenticated attackers to initiate Denial of Service attacks and, in some scenarios, execute arbitrary code on affected systems. The advisory applies to MariaDB Server installations on Linux, UNIX, and Windows operating systems.

Organizations utilizing the affected MariaDB Server versions should prioritize applying the available mitigation strategies or upgrading to patched versions as soon as possible to prevent potential exploitation. Failure to address this vulnerability could lead to service disruptions and compromise system integrity through unauthorized code execution. The advisory notes that mitigation is available, implying that immediate patching may not be universally deployed but that workarounds or fixes exist.