Skip to content
Products
Platform
Developer Tools
Portal

STACKIT-2026-001: Multiple Vulnerabilities in MariaDB

Last updated on

Advisory metadata

Section titled “Advisory metadata”
Attribute Value
Advisory ID STACKIT-2026-001
Published date 2026-10-22
Severity High / Critical
Affected service STACKIT MariaDB / MariaDB On-Premises

Overview

Section titled “Overview”

Security researchers and MariaDB Corporation identified multiple vulnerabilities across MariaDB database versions. These vulnerabilities impact on-premises installations and managed cloud database instances that lack recent security patches or maintain open network access.

Exploitation of these vulnerabilities allows unauthorized users under specific conditions to disrupt database services through denial-of-service conditions, access protected database contents without authorization, and escalate database privileges.

STACKIT initiated protective platform updates for the STACKIT MariaDB managed service. Customers who operate self-managed or on-premises systems must install vendor updates directly. In addition, all customers must review and restrict their network Access Control Lists (ACLs).

Affected versions

Section titled “Affected versions”

The vulnerabilities affect the following MariaDB versions:

  • MariaDB < 13.0.2
  • MariaDB < 12.3.3
  • MariaDB < 11.8.9
  • MariaDB < 11.4.13
  • MariaDB < 10.11.19
  • MariaDB < 10.6.28

Identified CVEs

Section titled “Identified CVEs”

The advisory addresses the following Common Vulnerabilities and Exposures (CVEs):

Required actions

Section titled “Required actions”

On-premises systems

Section titled “On-premises systems”
  • Inspect all self-managed MariaDB installations for affected versions.
  • Apply security updates to upgrade to one of the resolved versions: MariaDB ≥ 13.0.2, ≥ 12.3.3, ≥ 11.8.9, ≥ 11.4.13, ≥ 10.11.19, or ≥ 10.6.28.
  • Restrict network access to MariaDB ports (port 3306) to authorized client hosts and internal networks.

STACKIT MariaDB service

Section titled “STACKIT MariaDB service”
  • Platform updates: STACKIT initiated platform updates for the managed STACKIT MariaDB service to apply security patches across the service infrastructure.
  • Mandatory ACL configuration: Regardless of platform updates, you must configure restrictive Access Control Lists (ACLs) on your MariaDB instances:
    • Do not configure 0.0.0.0/0 in your ACL settings. Public database access creates significant security risk.
    • Restrict allowed CIDR blocks in the STACKIT Portal or through the STACKIT CLI to authorized application hosts and necessary STACKIT service IP ranges.
    • Review Create and manage instances for MariaDB for instructions on updating your ACL entries.

References

Section titled “References”

Contact and support

Section titled “Contact and support”

For questions regarding this advisory or assistance with instance configuration, contact STACKIT Support:

  • Open a ticket through the STACKIT Help Center.
  • Contact the support team by email at cybersecurity@stackit.cloud.