A security issue has been found in MariaDB, a commonly used open-source database tool that many websites rely on to store information like user accounts, product listings, and customer data. This flaw affects MariaDB versions 3.3.18 and 3.4.8.
The vulnerability impacts sites that accept unvalidated input from visitors (such as form entries), use the standard mysql_real_escape_string() feature designed to block database attacks, send that data to the database via text protocol, and use the big5 character set (a setting for displaying certain East Asian languages). In these specific cases, the built-in attack protection fails, allowing bad actors to run unauthorized commands on your database. This could let attackers steal, alter, or delete sensitive data stored on your site.
The MariaDB development team has already released patched versions 3.3.19 and 3.4.9 that resolve this issue.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172
