Critical Vulnerability in MariaDB: CVE-2026-44173 Affects Debian Packages
Summary
DEBIAN-CVE-2026-44173: ... Affects mariadb versions 1:10.11.11-0+deb12u1 – 1:11.8.8-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB is an open-source relational database management system that is widely used for web applications and data storage. It is known for its high performance, scalability, and compatibility with MySQL. The vulnerability CVE-2026-44173 affects multiple versions of MariaDB across different Debian distributions, potentially exposing systems to security risks.
Vulnerability Detail
CVE-2026-44173 is a critical vulnerability that arises from improper handling of certain database operations in MariaDB. This flaw can lead to unauthorized access to sensitive data, data corruption, or denial of service. The vulnerability is present in all versions of MariaDB from the initial release, making it imperative for users to address it promptly to safeguard their systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the MariaDB service by configuring firewall rules to limit connections to trusted IP addresses only. This can be done using the following command:
sudo ufw allow from <trusted_ip> to any port 3306
Replace <trusted_ip> with the actual IP address you wish to allow.
Conclusion
CVE-2026-44173 represents a significant security risk for users of MariaDB across various Debian distributions. It is crucial to update to the latest patched version to mitigate potential threats. Additionally, users can implement temporary workarounds to enhance security until an update can be performed.
See every vulnerability recorded for mariadb →
FAQ
CVE-2026-44173 is a critical vulnerability in MariaDB that can lead to unauthorized access and data corruption.
All versions of MariaDB from the initial release are affected across Debian distributions 12, 13, and 14.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If immediate updates are not possible, implement firewall rules to restrict access to the MariaDB service as a temporary workaround.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json, making it easy to track security issues.
References
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
