A security vulnerability has been identified in MariaDB server, a popular open-source database system commonly used to store and manage website data, in versions 3.3.18 and 3.4.8.
This flaw creates a gap in protection against SQL injection attacks, a common threat where bad actors tamper with database queries to steal, alter, or delete website and user data. The gap appears even when websites use the standard safety tool mysql_real_escape_string() to filter untrusted user input, as long as the site uses the big5 character set and sends data to the database via text protocol. In these specific cases, the standard safety step fails to block malicious input, leaving the database exposed.
The MariaDB development team has already released patched versions 3.3.19 and 3.4.9 that resolve this issue.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172
