MariaDB Patches Multiple Security Flaws Enabling Remote Code Execution and Data Theft

MariaDB published security updates (Sept 7, 2026) addressing several vulnerabilities across multiple server branches and Connector/C, including a CONNECT storage engine buffer-boundary flaw (CVE-2026-107815) and malformed .frm handling (CVE-2026-107821) that can enable remote code execution, a partition-name encoding issue (CVE-2026-102523) allowing unauthorized table access, and a Connector/C Zero-Config SSL bug (CVE-2026-107819) that can expose credentials via a man-in-the-middle; fixes and workarounds are provided and administrators are urged to upgrade, restrict FILE privileges, remove unused plugins, and apply Connector/C mitigations.