A security flaw has been identified in specific versions of MariaDB, a community-developed open-source fork of MySQL that many websites rely on to store information like user account details, product listings, and published page content.
This vulnerability affects MariaDB versions 3.3.18 and 3.4.8. It creates a gap in protection against SQL injection attacks, a common type of cyber attack where bad actors manipulate database queries to steal, alter, or delete a site's stored data. This gap exists even when developers use a standard built-in security tool designed to block these attacks, but only when the database connection uses the big5 character set and text protocol.
The team behind MariaDB has already released a fix for this issue in updated versions 3.3.19 and 3.4.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172