CVE-2026-85748 | MariaDB up to 12.3.2/13.0.1 Sys_refcursor use after free

October 16, 2026 Yanac

A vulnerability marked as critical has been reported in MariaDB up to 12.3.2/13.0.1. This affects an unknown function of the component Sys_refcursor Handler. Performing a manipulation results in use after free.

This vulnerability is identified as CVE-2026-85748. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More