CVE-2026-44168 | MariaDB Server up to 12.3.1 joiner os command injection (GHSA-vwf7-w26c-9w5h)

June 12, 2026 Yanac

A vulnerability, which was classified as critical, was found in MariaDB Server up to 10.6.25/10.11.16/11.4.10/11.8.6/12.3.1. Impacted is an unknown function of the component joiner Handler. Such manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-44168. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More