{"schema":"vulnpedia.research/1","cve":"CVE-2026-85745","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8","tags":["x_refsource_CONFIRM","Vendor Advisory"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8"}]},{"url":"https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce","tags":["x_refsource_MISC","Patch"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"}]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2","tags":["x_refsource_MISC","Release Notes"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"}]},{"url":"https://jira.mariadb.org/browse/MDEV-40328","tags":["x_refsource_MISC","Issue Tracking","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T16:30:30.866Z","url":"https://jira.mariadb.org/browse/MDEV-40328"},{"source":"nvd","sourceId":"CVE-2026-85745","modified":"2026-10-20T15:33:09.520","url":"https://jira.mariadb.org/browse/MDEV-40328"},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://jira.mariadb.org/browse/MDEV-40328"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85745","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-85745"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553280","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553280"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85745","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-85745"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85745","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85745"}]},{"url":"https://hackerone.com/reports/3856148","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://hackerone.com/reports/3856148"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84701","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84701"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84689","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84689"}]},{"source":"euvd","sourceId":"EUVD-2026-102942","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102942","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102942","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102942"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb10.11-0:10.11.18-4.1.1.hum1@aarch64","product":"mariadb10.11-0:10.11.18-4.1.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84701"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb10.11@10.11.18-4.1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb10.11-common-0:10.11.18-4.1.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"mariadb10.11-common-0:10.11.18-4.1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84701"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb10.11-common@10.11.18-4.1.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb10.11-embedded-0:10.11.18-4.1.1.hum1@x86_64","product":"mariadb10.11-embedded-0:10.11.18-4.1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84701"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb10.11-embedded@10.11.18-4.1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb10.11-oqgraph-engine-0:10.11.18-4.1.1.hum1@x86_64","product":"mariadb10.11-oqgraph-engine-0:10.11.18-4.1.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84701"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb10.11-oqgraph-engine@10.11.18-4.1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb10.11-server-galera-0:10.11.18-4.1.1.hum1@s390x","product":"mariadb10.11-server-galera-0:10.11.18-4.1.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84701"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb10.11-server-galera@10.11.18-4.1.1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-0:11.8.9-0.1.hum1@s390x","product":"mariadb11.8-0:11.8.9-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8@11.8.9-0.1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"mariadb11.8-common-0:11.8.9-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8-common@11.8.9-0.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64","product":"mariadb11.8-embedded-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8-embedded@11.8.9-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64","product":"mariadb11.8-oqgraph-engine-0:11.8.9-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8-oqgraph-engine@11.8.9-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64","product":"mariadb11.8-server-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8-server@11.8.9-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"Red Hat Hardened Images:mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64","product":"mariadb11.8-test-0:11.8.9-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84689"},{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."}],"purl":"pkg:rpm/redhat/mariadb11.8-test@11.8.9-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_10:mariadb","product":"mariadb as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_10:mariadb-gssapi-server","product":"mariadb-gssapi-server as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-gssapi-server","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_10:mariadb11.8","product":"mariadb11.8 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb11.8","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_10:mariadb11.8-gssapi-server","product":"mariadb11.8-gssapi-server as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb11.8-gssapi-server","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:Judy.src::mariadb:10.11","product":"Judy.src (mariadb:10.11) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/Judy?arch=src&rpmmod=mariadb:10.11","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:mariadb-embedded::mariadb:10.11","product":"mariadb-embedded (mariadb:10.11) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-embedded?rpmmod=mariadb:10.11","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:mariadb-test::mariadb:10.11","product":"mariadb-test (mariadb:10.11) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-test?rpmmod=mariadb:10.11","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-devel::mariadb:11.8","product":"mariadb-devel (mariadb:11.8) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-devel?rpmmod=mariadb:11.8","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-gssapi-server::mariadb:11.8","product":"mariadb-gssapi-server (mariadb:11.8) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-gssapi-server?rpmmod=mariadb:11.8","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-server-utils::mariadb:11.8","product":"mariadb-server-utils (mariadb:11.8) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb-server-utils?rpmmod=mariadb:11.8","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb::mariadb:11.8","product":"mariadb (mariadb:11.8) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network access to the MariaDB service so that only trusted client systems or the local host can connect.\n\n1. If the database is only accessed locally, configure MariaDB to listen exclusively on localhost by editing `/etc/my.cnf.d/mariadb-server.cnf` under the `[mysqld]` section:\n```\nbind-address = 127.0.0.1\n```\nThen restart the MariaDB service:\n```\nsystemctl restart mariadb\n```\n\n2. If remote access is necessary, use firewalld to block untrusted networks and permit access only from designated IP addresses or subnets:\n```\nfirewall-cmd --permanent --remove-service=mariadb\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"192.168.1.0/24\" service name=\"mariadb\" accept'\nfirewall-cmd --reload\n```\n\nCaveats: Restricting network reachability limits exposure to authorized networks and prevents untrusted network users from connecting, but it does not protect against malicious queries executed by already authenticated database accounts on permitted networks.\n\nWarning: Modifying firewall rules or binding addresses requires reloading firewall configurations or restarting the MariaDB service, which will terminate existing database connections and disrupt active services."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/mariadb?rpmmod=mariadb:11.8","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_7:mariadb","product":"mariadb as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_7:mariadb-server","product":"mariadb-server as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-server","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:galera::mariadb:10.3","product":"galera (mariadb:10.3) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/galera?rpmmod=mariadb:10.3","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:mariadb-errmsg::mariadb:10.3","product":"mariadb-errmsg (mariadb:10.3) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-errmsg?rpmmod=mariadb:10.3","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_8:mariadb-server::mariadb:10.3","product":"mariadb-server (mariadb:10.3) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-server?rpmmod=mariadb:10.3","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-backup","product":"mariadb-backup as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-backup","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-gssapi-server","product":"mariadb-gssapi-server as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-gssapi-server","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_enterprise_linux_9:mariadb-test","product":"mariadb-test as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-test","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_openstack_platform_13_(queens):mariadb-connect-engine","product":"mariadb-connect-engine as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb-connect-engine","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]},{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json","productId":"red_hat_openstack_platform_13_(queens):mariadb.src","product":"mariadb.src as a component of Red Hat OpenStack Platform 13 (Queens)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/mariadb?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-85745","modified":"2026-10-19T17:26:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85745.json"}]}],"vendorCoverage":{"total":255,"shown":32,"omitted":223,"source":"redhat"}}