CVE-2026-86047

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

CVE-2026-86047

The MariaDB server is vulnerable to a SQL injection flaw (CWE-89) in versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. The root cause is insufficient quoting of identifiers and values during SQL serialization within the mariadb-dump utility and SHOW CREATE SERVER and...