CVE-2026-107819

MEDIUM 5.9

MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

CVSS Score

5.9

EPSS Score

0.0%

EPSS Percentile

0th

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname verification mismatch before selecting a non-hashing authentication plugin. An active man-in-the-middle attacker with a valid certificate for another hostname could request mysql_clear_password and obtain the database password inside the attacker-controlled TLS connection. Other MariaDB connectors are not affected. This issue is fixed in version 3.4.10.

CWE	CWE-297
Vendor	mariadb
Product	server
Published	Oct 9, 2026
Last Updated	Oct 9, 2026

Stay Ahead of the Next One

Get instant alerts for mariadb server

Be the first to know when new medium vulnerabilities affecting mariadb server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

MariaDB / server

>= 3.4.1, < 3.4.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/MariaDB/server/security/advisories/GHSA-fmq9-qjxj-qpf7 github.com: https://github.com/mariadb-corporation/mariadb-connector-c/commit/e8c0a16d94ddf844668d684a7d42b37ac8e0fc02 github.com: https://github.com/mariadb-corporation/mariadb-connector-c/releases/tag/v3.4.10 jira.mariadb.org: https://jira.mariadb.org/browse/CONC-846