Critical Security Update for MariaDB Connector/C: CVE-2026-44172
Summary
RHSA-2026:83608: Red Hat Security Advisory: mariadb-connector-c security update. Affects mariadb-connector-c versions < 0:3.2.6-1.el9_2.1. Fixed in 0:3.2.6-1.el9_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB Connector/C is a client library for connecting to MariaDB and MySQL databases. It provides a C API for database interaction, enabling developers to build applications that can communicate with these database systems. The library is widely used in various applications due to its performance and compatibility with different database versions. However, a recent vulnerability has been identified that could potentially expose systems to security risks.
Vulnerability Detail
CVE-2026-44172 is a critical vulnerability affecting MariaDB Connector/C, which could allow unauthorized access to sensitive data. The vulnerability originates from improper handling of certain inputs, leading to potential data exposure. If exploited, attackers could gain access to confidential information, compromising the integrity and confidentiality of the database. The CVSS score for this vulnerability is 9.1, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:3.2.6-1.el9_2.1
This is the first release that contains the fix.
sudo dnf update mariadb-connector-cTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected database systems and implement additional security measures, such as firewalls and access controls, to mitigate the risk of exploitation until the patch is applied.
Conclusion
The vulnerability CVE-2026-44172 in MariaDB Connector/C poses a significant risk to database security. It is crucial for users to update to the patched version to mitigate potential threats. Utilizing tools like Vulert can aid in monitoring vulnerabilities effectively.
See every vulnerability recorded for mariadb-connector-c →
FAQ
CVE-2026-44172 is a critical vulnerability in MariaDB Connector/C that could allow unauthorized access to sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, implement temporary workarounds such as restricting database access and enhancing security measures.
Failure to address this vulnerability could lead to unauthorized access to sensitive data, compromising the security and integrity of your database.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json, ensuring your software remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for mariadb-connector-c.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.