EUVD-2026-36517Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAttacker targets MariaDB service
-
ExploitTriggers unspecified vulnerability
-
ImpactAchieves unknown impact
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Parameterized queries, prepared statements
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Persistence The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | No exploitation conditions can be confirmed from the available data. The CVE description provides no information about required configuration, authentication state, network exposure, or feature flags. The CVSS vector is absent, so attack vector, complexity, and privilege requirements cannot be determined. Defenders should treat conditions as unknown and consult the Alpine Linux security advisory or upstream MariaDB disclosure for specific prerequisites once published. |
| Impact | Risk cannot be meaningfully assessed with the available data. No CVSS vector has been provided, so attack complexity, attack vector, required privileges, and scope are entirely unknown. EPSS probability is absent. This CVE is not listed in the CISA Known Exploited Vulnerabilities catalog. No public proof-of-concept exploit has been identified at time of analysis. The only confirmed signal is that Alpine Linux issued a package fix, which establishes that a real vulnerability exists. The absence of all scoring data is itself a risk signal: analysts relying on CVSS triage pipelines will not surface this CVE automatically, and it may be underweighted relative to its actual severity. Without additional disclosure from the MariaDB upstream project or Alpine Linux security team, defenders cannot reliably assess prioritization. |
| Exploit ScenarioDerived | Because the vulnerability type, attack vector, and required privileges are entirely unknown, no grounded exploit scenario can be constructed without speculating beyond the available data. No public exploit code has been identified at time of analysis. Once Alpine Linux or the MariaDB project publishes additional details, a realistic attack scenario should be developed based on the confirmed vulnerability class. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – May 27, 2026
MariaDB on Alpine Linux has been patched in package version 11.8.7-r0, addressing an unspecified vulnerability. The CVE record contains only a terse Alpine Linux vendor advisory notice with no description, CVSS scoring, or CWE classification, making it impossible to characterize the nature of the vulnerability, affected attacker surface, or impact class at this time. No public exploit has been identified, no KEV listing exists, and EPSS data is absent - the full scope of risk cannot be assessed from available data.
RemediationAI
The primary fix is to upgrade the MariaDB Alpine Linux package to version 11.8.7-r0 or later using the Alpine package manager: run 'apk update && apk upgrade mariadb'. This is the only confirmed remediation derived from available data. No upstream MariaDB advisory URL was provided in the source data, so administrators should consult the Alpine Linux security advisories page and the MariaDB 11.8.x release notes directly to understand whether additional configuration changes or workarounds are recommended. If upgrading immediately is not feasible, consider restricting MariaDB network exposure to trusted hosts as a precautionary compensating control until the nature of the vulnerability is disclosed - note this does not mitigate local or authenticated attack paths if those apply.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in pypi, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
MariaDB is an open-source relational database management system and a community-developed fork of MySQL. The affected package is distributed via Alpine Linux's package management system (apk), versioned as 11.8.7-r0, which corresponds to MariaDB 11.8.7 with Alpine-specific packaging revision 0. No CWE classification has been assigned, so the root cause class - whether it is memory corruption, SQL injection, privilege escalation, authentication bypass, or another category - cannot be determined from available data. No CPE strings were supplied to further narrow the affected component.
Know when MariaDB gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: mariadb fixed in 11.8.7-r0
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for n
Exploit-DB