CVE-2026-107814

{
  "etk_id": "ETK-2026-1086",
  "cve_id": "CVE-2026-107814",
  "display_id": "CVE-2026-107814",
  "ghsa_id": "GHSA-m5gf-432r-g5jw",
  "euvd_id": "EUVD-2026-95899",
  "status": "published",
  "anchor_state": "anchored",
  "title": "MariaDB Server RPM startup-file injection",
  "summary": "Affected MariaDB Server RPM packages configure the mysql service account with the database data directory as its home directory. A database user with FILE privilege can add shell startup files that may run when an administrator starts a login shell as mysql; Debian packages are not affected.",
  "mitigation": "Upgrade MariaDB Server to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2, as appropriate for the release branch. Until upgraded, restrict FILE privilege and avoid interactive login shells for the mysql account.",
  "vendor": "MariaDB",
  "product": "Server",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "10.6.1-10.6.27",
        "10.11.1-10.11.18",
        "11.4.1-11.4.12",
        "11.8.1-11.8.8",
        "12.3.1-12.3.2",
        "13.0.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "10.6.28",
        "10.11.19",
        "11.4.13",
        "11.8.9",
        "12.3.3",
        "13.0.2"
      ],
      "package_name": null,
      "purl": null
    }
  ],
  "cwes": [
    732
  ],
  "cvss_score": 8.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
  "epss_score": 0.0028,
  "epss_percentile": 0.1933,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 7.128076783333333,
  "t0_at": "2026-10-09T16:02:25.544000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-09T16:02:25.544000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T16:02:25.544000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107814"
    }
  }
}