A security flaw (tracked as CVE-2026-44172) has been identified in specific versions of MariaDB, a popular open-source database system many websites use to store content, user account information, and other critical data. The issue only affects MariaDB versions 3.3.18 and 3.4.8. Websites often use a standard tool called mysql_real_escape_string to block SQL injection attacks, a common threat where bad actors send malicious input through a website to access, modify, or delete database information. For sites using the big5 character set and sending data via text protocol, this protection fails even when configured correctly, leaving the database vulnerable to these attacks. The flaw has already been patched in updated MariaDB versions 3.3.19 and 3.4.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172