CVE-2026-107818 | MariaDB up to 13.0.1 Service Unit wsrep-new-cluster code injection

October 9, 2026 Yanac

A vulnerability was found in MariaDB up to 13.0.1. It has been declared as very critical. This impacts an unknown function of the file /run/mysqld/wsrep-new-cluster of the component Service Unit. The manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-107818. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More