CVE-2026-107814
published 2026-10-09CVE-2026-107814: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages…
PriorityP348high8.4CVSS 3.1
AVNACLPRHUIRSCCHIHAH
EPSS
0.28%
19.5th percentile
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mariadb-devel_10.3 | mariadb | — | — |
| mariadb | mariadb | — | — |
| mariadb | mariadb | >= 10.11.1 < 10.11.19 | 10.11.19 |
| mariadb | mariadb | >= 10.6.1 < 10.6.28 | 10.6.28 |
| mariadb | mariadb | >= 11.4.1 < 11.4.13 | 11.4.13 |
| mariadb | mariadb | >= 11.8.1 < 11.8.9 | 11.8.9 |
| mariadb | mariadb | >= 12.3.1 < 12.3.3 | 12.3.3 |
| mariadb | mariadb | >= 13.0.1 < 13.0.2 | 13.0.2 |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb_10.11 | mariadb | — | — |
| mariadb_10.3 | mariadb | — | — |
| mariadb_11.8 | mariadb | — | — |
CVSS provenance
nvdv3.18.4HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
MariaDB up to 13.0.1 Service Account privileges management
vuldb·2026-10-09·CVSS 8.4
CVE-2026-107814 [HIGH] MariaDB up to 13.0.1 Service Account privileges management
A vulnerability has been found in MariaDB up to 13.0.1 and classified as problematic. This vulnerability affects unknown code of the component Service Account. This manipulation causes improper privilege management.
This vulnerability is tracked as CVE-2026-107814. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
Red Hat
mariadb: mariadb: Arbitrary code execution via insecure service account home directory
vendor_redhat·2026-10-09·CVSS 8.4
CVE-2026-107814 [HIGH] CWE-427 mariadb: mariadb: Arbitrary code execution via insecure service account home directory
mariadb: mariadb: Arbitrary code execution via insecure service account home directory
A flaw was found in MariaDB. The dedicated database service account was configured using the database data directory as its home directory. An authenticated database user with file-writing privileges could place malicious startup scripts into this directory. This could result in arbitrary code execution with the privileges of the service account when an administrator opens a login shell for that user.
Package: mariadb10.11 (Red Hat Enterprise Linux 10) - Affected
Package: mariadb11.8 (Red Hat Enterprise Linux 10) - Affected
Package: mariadb (Red Hat Enterprise Linux 7) - Affected
Package: mariadb:10.11/mariadb (Red Hat Enterprise Linux 8) - Affected
Package: mariadb:10.3/mariadb (Red Hat Enterprise
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-107814 mariadb10.11: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
bugzilla·2026-10-22·CVSS 8.4
CVE-2026-107814 [HIGH] CVE-2026-107814 mariadb10.11: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
CVE-2026-107814 mariadb10.11: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql accou
Bugzilla
CVE-2026-107814 mariadb11.8: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
bugzilla·2026-10-22·CVSS 8.4
CVE-2026-107814 [HIGH] CVE-2026-107814 mariadb11.8: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
CVE-2026-107814 mariadb11.8: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql accoun
Bugzilla
CVE-2026-107814 mariadb12.3: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
bugzilla·2026-10-22·CVSS 8.4
CVE-2026-107814 [HIGH] CVE-2026-107814 mariadb12.3: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
CVE-2026-107814 mariadb12.3: mariadb: Arbitrary code execution via insecure service account home directory [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql accoun
Hackernews
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
blogs_hackernews·2026-10-19
CVE-2026-102764 ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were left so exposed that breaking in barely required any effort. Even AI agents crossed lines they weren't supposed to.
Some attacks were cleve
https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw
2026-10-09
Published