A security flaw has been found in MariaDB, a community-developed open-source fork of the common MySQL database system that many websites rely on to store content, user account information, and other site data. The issue affects specific older versions of MariaDB: 3.3.18 and 3.4.8.
The flaw lets attackers bypass a common security measure that is supposed to block harmful user input from being sent to your database. This only impacts sites that use the big5 character set and the older text database protocol when passing user-submitted data to MariaDB, and could allow attackers to run unauthorized database commands, access sensitive stored data, or alter your site's content.
The vulnerability has already been fixed in updated MariaDB versions 3.3.19 and 3.4.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172