The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33482 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    Security Fix(es):

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

    Bug Fix(es) and Enhancement(s):

    * [RHEL9][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:RHEL-140363)

    * Rebase MariaDB 10.11 to 10.11.18 in RHEL9 (JIRA:RHEL-183087)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:33093 advisory.

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

    Bug Fix(es) and Enhancement(s):

    * Rebase MariaDB 10.11 to 10.11.18 in Rocky Linux10 (JIRA:Rocky Linux-183086)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0658 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-44168:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26,     10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST     the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters     were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the     donor side via the mariabackup SST method. This issue has been patched in versions 10.6.26, 10.11.17,     11.4.11, 11.8.7, and 12.3.2.

    CVE-2026-44170:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26,     10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on     WIndows with installed CONNECT engine and enabled REST support interpolated table HTTP attribute into the     curl command line without proper sanitizing. This allows the user to execute shell commands on the server.
    This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

    CVE-2026-44171:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26,     10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did     not check for /../ in the path when unpacking the archive. A proper backup can never contain such paths,     but a specially crafted archive could have caused mbstream to create files outside of the target-dir path.
    This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

    CVE-2026-44172:
    MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application     that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to     the database using text protocol and big5 character set was vulnerable to SQL injections, even though     mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19     and 3.4.9.

    CVE-2026-44173:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26,     10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed     SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM     clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11,     11.8.7, and 12.3.2.

    CVE-2026-48163:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27,     10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, during the SST     the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters     were properly validated which could allow a malicious joiner to execute arbitrary shell commands on the     donor side via the rsync SST method. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12,     11.8.8, and 12.3.2.

    CVE-2026-48165:
    MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27,     10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-     privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables     to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has     been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

    CVE-2026-49261:
    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1     through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with  wsrep_notify_cmd enabled     would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18,     11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable     wsrep_notify_cmd.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2eb8a9ab-5b5d-11f1-8607-8447094a420f advisory.

    The MariaDB project reports:
    Multiple vulnerabilities in MariaDB Cluster (Galera)

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mariadb package has been released.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33412 advisory.

    galera     [26.4.27-1]
    - Rebased to 26.4.27

    [26.4.26-1]
    - Rebased to 26.4.26

    mariadb11.8     [3:11.8.8-1]
    - Rebase to 11.8.8

    [3:11.8.7-1]
    - Rebase to 11.8.7

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33093 advisory.

    MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is     a client/server implementation consisting of a server daemon (mariadbd) and many different client programs     and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

    Security Fix(es):

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

    Bug Fix(es) and Enhancement(s):

    * Rebase MariaDB 10.11 to 10.11.18 in RHEL10 (JIRA:RHEL-183086)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33464 advisory.

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)


    Bug Fix(es) and Enhancement(s):

      * [AlmaLinux8][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:AlmaLinux-145347)
      * Rebase MariaDB 10.11 to 10.11.18 in AlmaLinux8 (JIRA:AlmaLinux-183088)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33481 advisory.

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)


    Bug Fix(es) and Enhancement(s):

      * [AlmaLinux9] [tracker] Rebase Galera to 26.4.27 MariaDB:11.8 (JIRA:AlmaLinux-140364)
      * Rebase MariaDB 11.8 to 11.8.8 in AlmaLinux9 (JIRA:AlmaLinux-183085)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0500 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-49261:
    MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1     through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd`     enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27,     10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable     `wsrep_notify_cmd`.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33093 advisory.

    [3:10.11.18-1]
    - Rebase to 10.11.18

    [3:10.11.17-1]
    - Rebase to 10.11.17

    [3:10.11.16-1]
    - Rebase to 10.11.16

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33412 advisory.

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)


    Bug Fix(es) and Enhancement(s):

      * Rebase MariaDB 11.8 to 11.8.8 in AlmaLinux10 (JIRA:AlmaLinux-183084)
      * Rebase Galera to 26.4.27 in AlmaLinux10 (JIRA:AlmaLinux-183259)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33464 advisory.

    galera     [26.4.27-1]
    - Rebased to 26.4.27

    [26.4.26-1]
    - Rebased to 26.4.26

    [26.4.25-1]
    - Rebased to 26.4.25

    [26.4.24-1]
    - Rebase to 26.4.24

    Judy     [1.0.5-18]
    - Remove README.Fedora; no longer needed since 1.0.5 version
    - Resolves: #1638717

    [1.0.5-17]
    - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
    - Drop legacy BuildRoot: and Group: tags
    - Drop redundant explicit buildroot cleaning
    - Specify all explicitly-used build requirements
    - Use %license where possible
    - Drop %defattr, redundant since rpm 4.4

    [1.0.5-16]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

    [1.0.5-15]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

    [1.0.5-14]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

    [1.0.5-13]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

    [1.0.5-12]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    [1.0.5-11]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

    [1.0.5-10]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

    [1.0.5-9]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

    mariadb     [3:10.11.18-1]
    - Rebase to 10.11.18

    [3:10.11.17-1]
    - Rebase to 10.11.17

    [3:10.11.16-1]
    - Rebase to 10.11.16

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33482 advisory.

    galera     [26.4.20-1.0.1]
    - Drop nmap-ncat requirement. [Orabug: 34116228]
    - Requirement to delete garbd-wrapper script and lp1184034 test case       without using patches. [Orabug: 34116228]

    [26.4.20-1]
    - Rebase to 26.4.20

    [26.4.19-1]
    - Rebase to 26.4.19

    [26.4.18-1]
    - Rebase to 26.4.18

    [26.4.16-1]
    - Rebase to 26.4.16

    [26.4.14-1]
    - Rebase to 26.4.14

    mariadb     [3:10.11.18-1]
    - Rebase to 10.11.18

    [3:10.11.17-1]
    - Rebase to 10.11.17

    [3:10.11.16-1]
    - Rebase to 10.11.16

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33464 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    Security Fix(es):

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)

    Bug Fix(es) and Enhancement(s):

    * [RHEL8][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:RHEL-145347)

    * Rebase MariaDB 10.11 to 10.11.18 in RHEL8 (JIRA:RHEL-183088)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0b7d84b1d6 advisory.

    **MariaDB 10.11.18**

        Upstream Release notes:
        https://mariadb.com/docs/release-notes/community-server/10.11/10.11.18         Upstream Changelog:
        https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.18

        Fixes CVEs:
        CVE-2026-49261 CVE-2026-48165 CVE-2026-48163 CVE-2026-44173 CVE-2026-44172 CVE-2026-44171     CVE-2026-44170 CVE-2026-44168

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1512:01 advisory.

    * mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd (CVE-2026-49261)     Bug Fix(es) and Enhancement(s):
      * [RHEL9][tracker] Rebase Galera to 26.4.27 MariaDB:10.11 (JIRA:RHEL-140363)
      * Rebase MariaDB 10.11 to 10.11.18 in RHEL9 (JIRA:RHEL-183087)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
323964	RHEL 9 : mariadb:10.11 (RHSA-2026:33482)	Nessus	Red Hat Local Security Checks	2026/6/30	2026/7/1	medium
325231	RockyLinux 10 : mariadb10.11 (RLSA-2026:33093)	Nessus	Rocky Linux Local Security Checks	2026/7/6	2026/7/10	medium
328424	TencentOS Server 3: mariadb:10.11 (TSSA-2026:0658)	Nessus	Tencent Local Security Checks	2026/7/20	2026/7/20	medium
318015	FreeBSD : MariaDB -- Multiple vulnerabilities (2eb8a9ab-5b5d-11f1-8607-8447094a420f)	Nessus	FreeBSD Local Security Checks	2026/5/30	2026/6/17	high
322943	Photon OS 5.0: Mariadb PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	2026/6/26	2026/7/2	critical
328757	Oracle Linux 10 : galera / and / mariadb11.8 (ELSA-2026-33412)	Nessus	Oracle Linux Local Security Checks	2026/7/21	2026/7/21	medium
323858	RHEL 10 : mariadb10.11 (RHSA-2026:33093)	Nessus	Red Hat Local Security Checks	2026/6/30	2026/7/1	medium
324579	AlmaLinux 8 : mariadb:10.11 (ALSA-2026:33464)	Nessus	Alma Linux Local Security Checks	2026/7/1	2026/7/1	critical
324836	AlmaLinux 9 : mariadb:11.8 (ALSA-2026:33481)	Nessus	Alma Linux Local Security Checks	2026/7/2	2026/7/2	critical
325866	TencentOS Server 4: mariadb (TSSA-2026:0500)	Nessus	Tencent Local Security Checks	2026/7/9	2026/7/9	critical
327642	Oracle Linux 10 : mariadb10.11 (ELSA-2026-33093)	Nessus	Oracle Linux Local Security Checks	2026/7/17	2026/7/17	critical
323957	AlmaLinux 10 : galera and mariadb11.8 (ALSA-2026:33412)	Nessus	Alma Linux Local Security Checks	2026/6/30	2026/6/30	critical
324345	Oracle Linux 8 : mariadb:10.11 (ELSA-2026-33464)	Nessus	Oracle Linux Local Security Checks	2026/7/1	2026/7/1	critical
324946	Oracle Linux 9 : mariadb:10.11 (ELSA-2026-33482)	Nessus	Oracle Linux Local Security Checks	2026/7/3	2026/7/3	critical
323905	RHEL 8 : mariadb:10.11 (RHSA-2026:33464)	Nessus	Red Hat Local Security Checks	2026/6/30	2026/7/1	medium
325142	Fedora 44 : mariadb10.11 (2026-0b7d84b1d6)	Nessus	Fedora Local Security Checks	2026/7/6	2026/7/6	medium
334518	MiracleLinux 9 : mariadb:10.11 galera-26.4.27-1.module+el9+1173+20cfe3bd, mariadb-10.11.18-1.module+el9+1173+20cfe3bd (AXSA:2026-1512:01)	Nessus	Miracle Linux Local Security Checks	2026/8/11	2026/8/11	medium

检测

插件搜索

medium

medium

medium

high

critical

medium

medium

critical

critical

critical

critical

critical

critical

critical

medium

medium

medium