EUVD-2026-36518Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessUnknown access vector
-
ExploitUnknown vulnerable MariaDB component
-
ImpactUnknown impact
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation conditions cannot be determined - no CVSS vector, CWE, or vulnerability description is available to identify required access level, configuration state, or triggering conditions. Authentication requirements, network accessibility, and whether specific MariaDB features must be enabled are all unknown. Defenders should not assume either a benign or severe exploitation profile until Alpine Linux or the MariaDB project publishes further details. |
| Impact | Risk cannot be meaningfully assessed from available data. No CVSS vector is present, making it impossible to determine attack vector (network vs. local), complexity, privilege requirements, or scope. EPSS probability is unavailable. The vulnerability is not listed in CISA KEV, and no public exploit code has been identified. The sole signal is an Alpine Linux vendor patch, which confirms a security-relevant fix exists but provides no severity context. Prioritization should be driven by the exposure of MariaDB instances in the environment and the criticality of the data they hold, pending further vendor disclosure. |
| Exploit ScenarioDerived | An attack scenario cannot be constructed from available data - the affected MariaDB component, required access level, and exploitation mechanism are all unknown. No proof-of-concept code has been identified. Until the vendor publishes full vulnerability details, defenders should treat this as an uncharacterized risk requiring patch application rather than targeted mitigation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – May 27, 2026
MariaDB on Alpine Linux received a security fix in package version 11.8.7-r0, addressing an unspecified vulnerability tracked as CVE-2026-44173. The nature of the underlying flaw, affected component, and attacker capability are not described in available intelligence - only the Alpine Linux vendor advisory confirms the patch. No CVSS score, CWE classification, KEV listing, or exploit code has been identified at time of analysis.
RemediationAI
Upgrade the Alpine Linux MariaDB package to version 11.8.7-r0 or later using 'apk upgrade mariadb'. This is the only confirmed remediation available. Because the vulnerability details are undisclosed, specific compensating controls cannot be responsibly recommended without risking under- or over-mitigation. Organizations unable to patch immediately should apply general hardening: restrict MariaDB network exposure to trusted clients only, enforce least-privilege database user accounts, and monitor for anomalous query patterns or authentication failures until the full advisory is published.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
MariaDB is an open-source relational database management system. The affected deployment context is Alpine Linux, where MariaDB is distributed as a packaged binary. The Alpine package versioning convention '11.8.7-r0' indicates this is the first Alpine package revision of upstream MariaDB 11.8.7. The specific vulnerable component, protocol, or code path within MariaDB is unknown - no CWE classification or technical description has been provided. MariaDB 11.8.x is part of the MariaDB Long Term Support release line and is widely deployed in containerized environments, where Alpine Linux is a common base image.
Know when MariaDB gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
Alpine Linux: mariadb fixed in 11.8.7-r0
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for n
Exploit-DB