EUVD-2026-36516Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local attack vector and required user interaction match the description; assessed PR:L because triggering a MariaDB server path handler realistically requires an authenticated database session, not anonymous access.
Primary rating from NVD.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
8DescriptionNVD
Alpine Linux: mariadb fixed in 11.8.7-r0
AnalysisAI
Path traversal in MariaDB Server (CVE-2026-44171) allows a local attacker to escape intended directory boundaries via user-interaction-driven file handling, with full confidentiality, integrity, and availability impact (CVSS 7.8). Multiple stable branches are affected, with fixes shipped in 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2; Alpine Linux has packaged the fix as mariadb 11.8.7-r0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Per the CVSS vector AV:L/AC:L/PR:N/UI:R, the attacker must deliver crafted input that is processed locally on the MariaDB Server host, and a local user must perform an action (UI:R) - for example loading a supplied file, importing a dump, or running a script that passes attacker-controlled path data to the vulnerable MariaDB code path. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Severity signals are mixed: the CVSS 3.1 base score of 7.8 is driven by high C/I/A impact (AV:L/AC:L/PR:N/UI:R), but EPSS sits at 0.01% (2nd percentile), the CVE is not on CISA KEV, and no public PoC was identified, so real-world exploitation pressure is currently low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker supplies crafted input containing directory-traversal sequences (for example via a filename argument processed by the server during an import, log, or file-handling operation) and induces a local user or DBA to execute the action that consumes it. The vulnerable path-handling code then reads from or writes to a location outside the intended directory, yielding disclosure, tampering, or denial of service. … |
| Remediation | Vendor-released patches are available - upgrade MariaDB Server to 10.6.26, 10.11.17, 11.4.11, 11.8.7, or 12.3.2 depending on which branch you run, per the EUVD record and the upstream advisory at https://github.com/MariaDB/server/security/advisories/GHSA-9pjh-5hhw-65v9 and bug https://jira.mariadb.org/browse/MDEV-39408. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify and document all MariaDB Server instances in production and development environments, recording their current versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today