CVE-2026-92262

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server versions prior to 10.11.19 MariaDB server versions prior to 11.4.13 MariaDB server server versions prior to 11.8.9 MariaDB server versions prior to 12.3.3 MariaDB server versions prior to 13.0.2

Description An issue exists where the #mysql50# bypass prefix allows the prefix to bypass normal table-name filesystem encoding. An attacker can use a table name containing the #mysql50# prefix to access files under their legacy unencoded name. This can lead to system crashes, data corruption, data exfiltration, or remote code execution.

Recommendations Update to version 10.6.28 Update to version 10.11.19 Update to version 11.4.13 Update to version 11.8.9 Update to version 12.3.3 Update to version 13.0.2