Lucene search
+L

CVE-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass

🗓️ 03 Mar 2026 18:12:12Reported by AMZNType 
cvelist
 cvelist
🔗 www.cve.org👁 107 Views

MariaDB Server Audit Plugin fails to log commented statements when filters are set up to 11.8.5.

Related
Affected
Refs
[
  {
    "vendor": "MariaDB Foundation",
    "product": "MariaDB Server",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.6.25",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.11.16",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.4.10",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.8.6",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Amazon",
    "product": "Aurora MySQL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.12.6",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.04.6",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.10.3",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.11.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Amazon",
    "product": "RDS for MySQL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "5.7.44-RDS.20260212",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.0.45",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.4.8",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Amazon",
    "product": "RDS for MariaDB",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.6.25",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.11.16",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.4.10",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.8.6",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Oct 2026 18:24Current
CVSS 3.14.3
CVSS 45.3
EPSS0.00285
SSVC
107