A security flaw has been identified in specific older versions of MariaDB, a widely used open-source database system that many websites rely on to store content, customer data, and other critical site information.
The issue affects MariaDB versions 3.3.18 and 3.4.8 when a site uses the big5 character set and text protocol for database connections. Under these conditions, the standard tool meant to block dangerous user input from being used in database queries fails to work correctly, which could allow attackers to run unauthorized queries to access, modify, or delete your site's stored data.
The MariaDB development team has released patched versions 3.3.19 and 3.4.9 that resolve this vulnerability.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172