UpHeron
All vulnerabilities

Servers and applications

CVE-2026-44169

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

Severity
Medium 4.3
Published
12 Jun 2026
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
11.4.11, 11.8.7
Sources
NVD

Affected software

SoftwareAffected versions
MariaDBServers and applications · cpe:a:mariadb:mariadb
  • From 11.4.1 before 11.4.11
  • From 11.8.1 before 11.8.7
  • Version 12.3.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-44169
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-44169