What’s Vulnerable › Products

mariadb-corporation mariadb-connector-j vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your mariadb-corporation mariadb-connector-j version is affected

Latest mariadb-corporation mariadb-connector-j vulnerabilities

• CVE-2026-119281 — MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing (CVSS 5.9)
• CVE-2026-119280 — MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths (CVSS 3.7)
• CVE-2026-119279 — MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths (CVSS 5.9)
• CVE-2026-119278 — MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication (CVSS 5.9)
• CVE-2026-119277 — MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths (CVSS 5.9)
• CVE-2026-119276 — MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets (CVSS 5.9)
• CVE-2026-119210 — MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files (CVSS 5.9)
• CVE-2026-61700 — MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests (CVSS 3.7)
• CVE-2026-55858 — MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client (CVSS 5.9)
• CVE-2026-55857 — MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials (CVSS 5.9)
• CVE-2026-55856 — MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake (CVSS 5.9)