CVE-2026-44172

MariaDB server (fork of MySQL) is affected in versions 3.3.18 and 3.4.8 where non-validated user input escaped with mysql_real_escape_string() and sent via text protocol with big5 can lead to SQL injections, despite the escaping. The issue is fixed in 3.3.19 and 3.4.9. No exploitation details are...