A security flaw has been identified in specific versions of MariaDB, a popular open-source database software that many websites use to store information like user accounts, product listings, and site content.
Normally, when websites accept input from visitors (such as form submissions or search terms), a standard built-in safety tool is used to block malicious input that could let attackers run unauthorized commands on the database. But in MariaDB versions 3.3.18 and 3.4.8, this safety tool fails when the database is set to use the big5 character set (a common configuration for Traditional Chinese content) and processes data via text protocol, leaving the site vulnerable to SQL injection attacks. These attacks could allow bad actors to access, modify, or delete the data stored on your website.
The flaw has been fixed in updated MariaDB versions 3.3.19 and 3.4.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172