CVE-2026-44169

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

• CWE-863

• https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2Vendor Advisory
• https://jira.mariadb.org/browse/MDEV-39288Issue Tracking

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4416The Performance Library component of Gigabyte Control Center…8.5
• CVE-2026-44160Fluentd collects events from various data sources and writes…7.5
• CVE-2026-44161Fluentd collects events from various data sources and writes…7.2
• CVE-2026-44166Pocketbase is an open source web backend written in go. Prio…7.6
• CVE-2026-44167phpseclib is a PHP secure communications library. Prior to 1…7.5
• CVE-2026-44168MariaDB server is a community developed fork of MySQL server…8
• CVE-2026-44170MariaDB server is a community developed fork of MySQL server…9.8
• CVE-2026-44171MariaDB server is a community developed fork of MySQL server…7.8
• CVE-2026-44172MariaDB server is a community developed fork of MySQL server…9.1
• CVE-2026-44173MariaDB server is a community developed fork of MySQL server…5.3
• CVE-2026-44174Kirby is an open-source content management system. Prior to …8.7
• CVE-2026-44175Kirby is an open-source content management system. In versio…8.5