CVE-2026-107821
published 2026-10-09CVE-2026-107821: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently…
PriorityP351high8CVSS 3.1
AVNACHPRHUINSCCHIHAH
EPSS
0.76%
54.7th percentile
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mariadb-devel_10.3 | mariadb | — | — |
| mariadb | mariadb | — | — |
| mariadb | mariadb | >= 10.11.1 < 10.11.19 | 10.11.19 |
| mariadb | mariadb | >= 10.6.1 < 10.6.28 | 10.6.28 |
| mariadb | mariadb | >= 11.4.1 < 11.4.13 | 11.4.13 |
| mariadb | mariadb | >= 11.8.1 < 11.8.9 | 11.8.9 |
| mariadb | mariadb | >= 12.3.1 < 12.3.3 | 12.3.3 |
| mariadb | mariadb | >= 13.0.1 < 13.0.2 | 13.0.2 |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb | server | — | — |
| mariadb_10.11 | mariadb | — | — |
| mariadb_10.3 | mariadb | — | — |
| mariadb_11.8 | mariadb | — | — |
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
vendor_redhat8.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
MariaDB up to 13.0.1 FRM Metadata memory corruption
vuldb·2026-10-09·CVSS 8.0
CVE-2026-107821 [HIGH] MariaDB up to 13.0.1 FRM Metadata memory corruption
A vulnerability was found in MariaDB up to 13.0.1. It has been rated as very critical. Affected is an unknown function of the component FRM Metadata Handler. This manipulation causes memory corruption.
This vulnerability is registered as CVE-2026-107821. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
Red Hat
mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
vendor_redhat·2026-10-09·CVSS 8.0
CVE-2026-107821 [HIGH] CWE-787 mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
A flaw was found in MariaDB. An attacker able to place a crafted table format (FRM) metadata file into the database data directory can exploit insufficient validation of metadata boundaries and field counts when the server opens the file. This could lead to out-of-bounds memory operations, potentially allowing arbitrary code execution or causing a Denial of Service (DoS) by crashing the database server.
Package: mariadb10.11 (Red Hat Enterprise Linux 10) - Affected
Package: mariadb11.8 (Red Hat Enterprise Linux 10) - Affected
Package: mariadb (Red Hat Enterprise Linux 7) - Affected
Package: mariadb:10.11/mariadb (Red Hat Enterprise Linux 8) - Affected
Package: mariadb:10.3/mariadb (Red Hat Enterprise Linux 8) - Affec
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
blogs_hackernews·2026-10-19
CVE-2026-102764 ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were left so exposed that breaking in barely required any effort. Even AI agents crossed lines they weren't supposed to.
Some attacks were cleve
Bugzilla
CVE-2026-107821 mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
bugzilla·2026-10-09·CVSS 8.0
CVE-2026-107821 [HIGH] CVE-2026-107821 mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
CVE-2026-107821 mariadb: mariadb: Arbitrary code execution via crafted FRM metadata
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5https://jira.mariadb.org/browse/MDEV-40571
2026-10-09
Published