CVE-2026-119280 | MariaDB Corporation MariaDB Connector/J up to 3.3.6/3.4.4/3.5.10 XA Recovery input validation

October 29, 2026 Yanac

A vulnerability described as problematic has been identified in MariaDB Corporation MariaDB Connector and J up to 3.3.6/3.4.4/3.5.10. The impacted element is the function MariaDbPoolConnection.recover/MariaDbPoolPinnedConnection.recover of the component XA Recovery. Executing a manipulation can lead to improper input validation.

This vulnerability is handled as CVE-2026-119280. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More