A security vulnerability has been found in specific older versions of MariaDB, a widely used open-source database tool that many websites rely on to store content and user information.
The flaw impacts MariaDB versions 3.3.18 and 3.4.8. If a website takes input from visitors (like search queries, form responses, or login details), uses the standard mysql_real_escape_string tool to clean that input before sending it to the database, and uses the big5 Traditional Chinese character set for that database communication, the cleaning tool can fail. This opens the door to SQL injection attacks, where bad actors could run unauthorized commands on your site's database, which may lead to stolen data, altered site content, or other harmful changes.
The problem has been fixed in updated MariaDB versions 3.3.19 and 3.4.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172
