Lucene search
+L

CVE-2026-48163 MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

🗓️ 12 Jun 2026 17:34:57Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 96 Views

MariaDB wsrep SST unsafe donor parameter handling enables remote command execution via rsync; patched in later releases.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
MariaDB -- Multiple vulnerabilities
28 May 202600:00
–freebsd
alpinelinux
AlpineLinux
CVE-2026-48163
12 Jun 202617:34
–alpinelinux
bdu_fstec
BDU FSTEC
The vulnerability of the State Snapshot Transfer (SST) mechanism of the MariaDB database management system allows attackers to execute arbitrary commands.
21 Sep 202600:00
–bdu_fstec
cgr
Chainguard
CVE-2026-48163 vulnerabilities
16 Sep 202602:54
–cgr
circl
Circl
CVE-2026-48163
16 Jun 202622:07
–circl
cve
CVE
CVE-2026-48163
12 Jun 202617:34
–cve
debiancve
Debian CVE
CVE-2026-48163
12 Jun 202617:34
–debiancve
euvd
EUVD
EUVD-2026-36519
12 Jun 202617:34
–euvd
fedora
Fedora
[SECURITY] Fedora 44 Update: mariadb10.11-10.11.18-2.fc44
5 Jul 202601:10
–fedora
fedora
Fedora
[SECURITY] Fedora 44 Update: mariadb11.8-11.8.8-3.fc44
29 Jun 202600:58
–fedora
Rows per page
[
  {
    "vendor": "MariaDB",
    "product": "server",
    "versions": [
      {
        "version": ">= 10.6.1, < 10.6.27",
        "status": "affected"
      },
      {
        "version": ">= 10.11.1, < 10.11.18",
        "status": "affected"
      },
      {
        "version": ">= 11.4.1, < 11.4.12",
        "status": "affected"
      },
      {
        "version": ">= 11.8.1, < 11.8.8",
        "status": "affected"
      },
      {
        "version": ">= 12.3.1, < 12.3.2",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Jun 2026 17:34Current
CVSS 3.18 - 9.1
EPSS0.01123
SSVC
96