CVE-2026-119280

A flaw was found in MariaDB Connector/J. A malicious database server or an attacker intercepting network traffic can trigger a Denial of Service DoS by returning crafted transaction identifier lengths during distributed transaction XA recovery. Because the connector does not validate these length...