Cyber Resilience

CVE-2026-44173

MediumUpdated

Published: 12 June 2026

Published
12 June 2026
Modified
30 June 2026
KEV Added
Patch
CVSS Score v3.1 5.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
EPSS Score 0.0028 19.4th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-44173 is a medium-severity Incorrect Authorization (CWE-863) vulnerability in Mariadb Mariadb. Its CVSS base score is 5.0 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 19.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability details

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO…

more

DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

Bypasses FILE privilege authorization check (CWE-863) to enable unauthorized file writes via SELECT INTO OUTFILE/DUMPFILE, directly facilitating server-side privilege escalation and exploitation of the public-facing database.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

Affected Assets

mariadb
mariadb
12.3.1 · 10.6.1 — 10.6.26 · 10.11.1 — 10.11.17 · 11.4.1 — 11.4.11

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-863 CWE-266

Periodic review and update of procedures reduces incorrect authorization implementations over time.

addresses: CWE-863 CWE-266

Supervision identifies cases where authorization logic incorrectly permits unauthorized actions.

addresses: CWE-266 CWE-863

Explicitly specifying privileges and group/role memberships for accounts reduces the risk of incorrect privilege assignments.

addresses: CWE-863

Defining permitted attribute values and auditing modifications reduces the chance of incorrect authorization outcomes due to tampered or missing labels.

addresses: CWE-863

The authorization process and usage restrictions help prevent incorrect authorization for remote access types.

addresses: CWE-863

Establishing configuration and connection requirements helps ensure correct rather than incorrect authorization for wireless access.

addresses: CWE-863

Establishing connection authorization processes for mobile devices helps ensure authorization decisions are correctly implemented rather than incorrect.

addresses: CWE-863

Ensures authorization decisions for external system use are correctly implemented and enforced.

References