CVE-2026-86047

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-86047
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-86047.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-86047
Aliases
Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
RHSA (2)
ROOT (2)
Published
2026-10-16T16:37:04Z
Modified
2026-10-22T10:30:54Z
Severity
  • 7.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H CVSS Calculator
Summary
MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
Details

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A low-privileged attacker can trigger the issue when an attacker-created object with crafted identifiers or values is included in SHOW output or a dump, then create an object with crafted identifiers or values so generated SQL contains injected statements and execute attacker-injected SQL when the poisoned output is applied. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86047.json"
}
References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type
GIT
Repo
https://github.com/mariadb/server
Events
Introduced
00a8357bd30fdfca23720448a3f638290b6d35b7
Fixed
210ab6edf47fa73f3b77e974ed2e9357ccdd051c
Introduced
2437674291f31c91869a74eb6ebd9f03dc52bd43
Fixed
93e051860a9c7e87ee8cee6ed38b640d491f7170
Introduced
fa69b085b10f19a3a8b6e7adab27c104924333ae
Fixed
170b1d70737be6f134448f51713cdc1ae215b420
Introduced
1c4aed7c680c0402d6e97e097f03815c0e9bf4c5
Fixed
bf9193a939f515e95dd8def1a5468088c91cede6
Introduced
21a0714a118614982d20bfa504763d7247800091
Fixed
83e909fc2a0dbc394b4b683fb3fa2d7dcf26cc5e
Introduced
7f923870722c5d382e16d56af526d1ee4e03f987
Fixed
620a4b5624222048fece7fe1789978ae0675cae2
Fixed
2b28d1c424104429eeed43115ee6d8a803671d52
Fixed
3646569225758c8225e7342783d775ef7c7570e5
Fixed
5acb43522863c9bd6b91f354104ea247bf513e9a
Fixed
9d4ffe23b25808f7858b2dc48106fbd60cf0e513
Fixed
d5d741a3076f911b468518d6b06a917593498c5b
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "10.6.1"
                },
                {
                    "fixed": "10.6.28"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "10.11.1"
                },
                {
                    "fixed": "10.11.19"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "11.4.1"
                },
                {
                    "fixed": "11.4.13"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "11.8.1"
                },
                {
                    "fixed": "11.8.9"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "12.3.1"
                },
                {
                    "fixed": "12.3.3"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "introduced": "13.0.1"
                },
                {
                    "fixed": "13.0.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "2b28d1c424104429eeed43115ee6d8a803671d52"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "3646569225758c8225e7342783d775ef7c7570e5"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "5acb43522863c9bd6b91f354104ea247bf513e9a"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "9d4ffe23b25808f7858b2dc48106fbd60cf0e513"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "d5d741a3076f911b468518d6b06a917593498c5b"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "mariadb-10.11.19",
            "range": [
                {
                    "fixed": "93e051860a9c7e87ee8cee6ed38b640d491f7170"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "mariadb-10.6.28",
            "range": [
                {
                    "fixed": "210ab6edf47fa73f3b77e974ed2e9357ccdd051c"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "mariadb-11.4.13",
            "range": [
                {
                    "fixed": "170b1d70737be6f134448f51713cdc1ae215b420"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "mariadb-11.8.9",
            "range": [
                {
                    "fixed": "bf9193a939f515e95dd8def1a5468088c91cede6"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "mariadb-12.3.3",
            "range": [
                {
                    "fixed": "83e909fc2a0dbc394b4b683fb3fa2d7dcf26cc5e"
                }
            ],
            "source": "REFERENCES_TAG"
        },
        {
            "original_tag": "mariadb-13.0.2",
            "range": [
                {
                    "fixed": "620a4b5624222048fece7fe1789978ae0675cae2"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

mariadb-10.*
mariadb-10.6.1
mariadb-10.6.10
mariadb-10.6.11
mariadb-10.6.12
mariadb-10.6.13
mariadb-10.6.14
mariadb-10.6.16
mariadb-10.6.17
mariadb-10.6.18
mariadb-10.6.19
mariadb-10.6.2
mariadb-10.6.20
mariadb-10.6.21
mariadb-10.6.22
mariadb-10.6.23
mariadb-10.6.24
mariadb-10.6.25
mariadb-10.6.26
mariadb-10.6.27
mariadb-10.6.3
mariadb-10.6.4
mariadb-10.6.5
mariadb-10.6.6
mariadb-10.6.8
mariadb-10.6.9
mariadb-11.*
mariadb-11.4.1
mariadb-11.4.10
mariadb-11.4.11
mariadb-11.4.11b
mariadb-11.4.2
mariadb-11.4.3
mariadb-11.4.4
mariadb-11.4.5
mariadb-11.4.6
mariadb-11.4.7
mariadb-11.4.8
mariadb-11.4.9
mariadb-11.8.1
mariadb-11.8.2
mariadb-11.8.3
mariadb-11.8.4
mariadb-11.8.6
mariadb-11.8.7
mariadb-11.8.7b
mariadb-12.*
mariadb-12.3.1
mariadb-13.*
mariadb-13.0.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-86047.json"