CVE WATCH / VULNERABILITY DETAIL
CVE-2026-97380
HIGHCVSS 8.8NVD feed
Published 16 October 2026 · tracked since 17 October 2026
Description
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor priv
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-111613 HIGH 7.5
- CVE-2026-111392 MEDIUM 4.8
- CVE-2026-109461 MEDIUM 5.9
- CVE-2026-86047 HIGH 7.7
- CVE-2026-92262 CRITICAL 9.9
- CVE-2026-85745 MEDIUM 4.3
- CVE-2026-85746 CRITICAL 9.9
- CVE-2026-85748 CRITICAL 9.9
- CVE-2026-85985 MEDIUM 5.4
- CVE-2026-86008 HIGH 7.2