Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Duplicate
-
None
-
2026-11
Description
CVE-2026-94635 with severity High.
Package type nvd:cpe, name thrift, affected version 0.24.0, fix version 0.25.0.
Recommended upgrade: -.
Total number of findings: 46
Environment: MariaDB
Investigation
Elastic (Kibana Discover): https://mariadb-serverless-prod-e6994e.kb.us-central1.gcp.elastic.cloud/app/discover#/?_g=%28filters%3A%21%28%29%2CrefreshInterval%3A%28pause%3A%21t%2Cvalue%3A0%29%2Ctime%3A%28from%3Anow-1440m%2Cto%3Anow%29%29&_a=%28columns%3A%21%28%29%2CdataSource%3A%28dataViewId%3Asm-vm-v2-default%2Ctype%3AdataView%29%2Cfilters%3A%21%28%29%2Cinterval%3Aauto%2Cquery%3A%28language%3Akuery%2Cquery%3A%27%28cve_id.keyword%3A%22CVE-2026-94635%22+or+cve_id%3A%22CVE-2026-94635%22%29+and+%28data_source.keyword%3A%22lw%22+or+data_source%3A%22lw%22%29+and+%28affects.base_id.keyword%3A%22MariaDB%22+or+affects.base_id%3A%22MariaDB%22%29%27%29%2Csort%3A%21%28%21%28%27%40timestamp%27%2Cdesc%29%29%29
Grafana: https://vm.sec.mariadb.net/d/be0u2pm2acjk0a/findings-over-time?from=now-1440m&to=now&var-BasicId=MariaDB&var-CveId=CVE-2026-94635&var-ExtraId=10.6.28-24&var-FindingType=ctr&var-Type=application
Lacework: https://mariadb.lacework.net/ui/vulnerabilities/vuln/CVE-2026-94635
For general information on vulnerability management please refer to the Wiki page.
| Type | Software Package | Version | package_name | Report Date |
|---|---|---|---|---|
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-10.6.28-24-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-10.6.28-24-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-deb11-10.6.28-24-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-deb11-10.6.28-24-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-deb12-10.6.28-24-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-deb12-10.6.28-24-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-ubu2204-10.6.28-24-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-ubu2204-10.6.28-24-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-ubu2404-10.6.28-24-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 10.6.28-24 | mariadb-enterprise-ubu2404-10.6.28-24-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-11.4.13-10-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-11.4.13-10-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-deb11-11.4.13-10-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-deb11-11.4.13-10-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-deb12-11.4.13-10-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-deb12-11.4.13-10-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-ubu2204-11.4.13-10-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-ubu2204-11.4.13-10-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-ubu2404-11.4.13-10-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.4.13-10 | mariadb-enterprise-ubu2404-11.4.13-10-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb11-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb11-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb12-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb12-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb13-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-deb13-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2204-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2204-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2404-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2404-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2604-11.8.9-6-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 11.8.9-6 | mariadb-enterprise-ubu2604-11.8.9-6-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-deb12-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-deb12-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-deb13-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-deb13-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2204-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2204-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2404-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2404-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2604-12.3.3-0-Linux-aarch64 | 2026-10-12T08:05:50Z |
| application | MariaDB | 12.3.3-0 | mariadb-enterprise-ubu2604-12.3.3-0-Linux-x86_64 | 2026-10-12T08:05:50Z |
Attachments
Issue Links
- includes
-
MCOL-6673 Update bundled Apache Thrift to 0.25.0 (SBOM CVE fixes)
-
- Closed
-