Uploaded image for project: 'MariaDB ColumnStore'
  1. MariaDB ColumnStore
  2. MCOL-6648

SBOM vulnerability CVE-2026-85493 (ES)

    XMLWordPrintable

Details

    • 2026-11

    Description

      CVE-2026-85493 with severity High.
      Package type nvd:cpe, name thrift, affected version 0.24.0, fix version 0.25.0.
      Recommended upgrade: -.
      Total number of findings: 46
      Environment: MariaDB
      Investigation
      Elastic (Kibana Discover): https://mariadb-serverless-prod-e6994e.kb.us-central1.gcp.elastic.cloud/app/discover#/?_g=%28filters%3A%21%28%29%2CrefreshInterval%3A%28pause%3A%21t%2Cvalue%3A0%29%2Ctime%3A%28from%3Anow-1440m%2Cto%3Anow%29%29&_a=%28columns%3A%21%28%29%2CdataSource%3A%28dataViewId%3Asm-vm-v2-default%2Ctype%3AdataView%29%2Cfilters%3A%21%28%29%2Cinterval%3Aauto%2Cquery%3A%28language%3Akuery%2Cquery%3A%27%28cve_id.keyword%3A%22CVE-2026-85493%22+or+cve_id%3A%22CVE-2026-85493%22%29+and+%28data_source.keyword%3A%22lw%22+or+data_source%3A%22lw%22%29+and+%28affects.base_id.keyword%3A%22MariaDB%22+or+affects.base_id%3A%22MariaDB%22%29%27%29%2Csort%3A%21%28%21%28%27%40timestamp%27%2Cdesc%29%29%29
      Grafana: https://vm.sec.mariadb.net/d/be0u2pm2acjk0a/findings-over-time?from=now-1440m&to=now&var-BasicId=MariaDB&var-CveId=CVE-2026-85493&var-ExtraId=10.6.28-24&var-FindingType=ctr&var-Type=application
      Lacework: https://mariadb.lacework.net/ui/vulnerabilities/vuln/CVE-2026-85493

      For general information on vulnerability management please refer to the Wiki page.

      Type Software Package Version package_name Report Date
      application MariaDB 10.6.28-24 mariadb-enterprise-10.6.28-24-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-10.6.28-24-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-deb11-10.6.28-24-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-deb11-10.6.28-24-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-deb12-10.6.28-24-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-deb12-10.6.28-24-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-ubu2204-10.6.28-24-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-ubu2204-10.6.28-24-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-ubu2404-10.6.28-24-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 10.6.28-24 mariadb-enterprise-ubu2404-10.6.28-24-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-11.4.13-10-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-11.4.13-10-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-deb11-11.4.13-10-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-deb11-11.4.13-10-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-deb12-11.4.13-10-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-deb12-11.4.13-10-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-ubu2204-11.4.13-10-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-ubu2204-11.4.13-10-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-ubu2404-11.4.13-10-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.4.13-10 mariadb-enterprise-ubu2404-11.4.13-10-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb11-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb11-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb12-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb12-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb13-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-deb13-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2204-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2204-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2404-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2404-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2604-11.8.9-6-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 11.8.9-6 mariadb-enterprise-ubu2604-11.8.9-6-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-deb12-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-deb12-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-deb13-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-deb13-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2204-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2204-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2404-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2404-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2604-12.3.3-0-Linux-aarch64 2026-10-12T08:05:50Z
      application MariaDB 12.3.3-0 mariadb-enterprise-ubu2604-12.3.3-0-Linux-x86_64 2026-10-12T08:05:50Z

      Attachments

        Issue Links

          Activity

            People

              stasusov Stanislav Usov
              service-account-security MariaDB Security Service
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0.5d
                  0.5d
                  Remaining:
                  0d
                  Logged:
                  Time Not Required
                  Not Specified

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.