MariaDB Galera wsrep_notify_cmd shell injection (CVSS 10.0)
cve · CVE-2026-49261
Coverage timeline
1
first 2026-06-12 → last 2026-06-12
Briefs
1
1 distinct
Sources cited
13
10 hosts
Sections touched
1
deep_dive
Co-occurring entities
0
no co-occurrence
Story timeline
- 2026-06-12CTI Daily Brief — 2026-06-12
Where this entity is cited
- deep_dive1
Source distribution
- drupal.org3 (23%)
- security-hub.ncsc.admin.ch2 (15%)
- attack.mitre.org1 (8%)
- bleepingcomputer.com1 (8%)
- csoonline.com1 (8%)
- imperva.com1 (8%)
- mariadb.org1 (8%)
- securityonline.info1 (8%)
- other2 (15%)
External references
All cited sources (13)
- security-hub.ncsc.admin.chprimaryinlineNCSC-CH CSH, 2026-06-11https://security-hub.ncsc.admin.ch/#/posts/12627
- security-hub.ncsc.admin.chprimaryinlineNCSC.ch Security Hub post 12584https://security-hub.ncsc.admin.ch/#/posts/12584
- attack.mitre.orginlineT1059https://attack.mitre.org/techniques/T1059/
- bleepingcomputer.cominlineBleepingComputer (2026-05-22)https://www.bleepingcomputer.com/news/security/drupal-critical-sql-injection-flaw-now-targeted-in-attacks/
- csoonline.cominlineCSO Online, 2026-05-20https://www.csoonline.com/article/4175329/drupal-admins-rushing-to-patch-maximum-severity-sql-injection-vulnerability.html
- drupal.orginlineDrupal PSA, 2026-05-18https://www.drupal.org/psa-2026-05-18
- drupal.orginlineSA-CORE-2026-004https://www.drupal.org/sa-core-2026-004
- drupal.orginlineDrupal Steward WAFhttps://www.drupal.org/steward
- imperva.cominlineImperva, 2026-05-21https://www.imperva.com/blog/imperva-customers-protected-against-cve-2026-9082-in-drupal-core/
- mariadb.orginlineMariaDB Foundation, 2026-06-02https://mariadb.org/mariadb-community-server-corrective-releases/
- securityonline.infoinlineSecurityOnlinehttps://securityonline.info/mariadb-security-flaw-cvss-10/
- securityweek.cominlineSecurityWeek, 2026-05-19https://www.securityweek.com/drupal-to-patch-highly-critical-vulnerability-at-risk-of-quick-exploitation/
- slcyber.ioinlineSearchlight Cyber write-uphttps://slcyber.io/research-center/keys-to-the-kingdom-anonymous-sql-injection-in-drupal-core-cve-2026-9082/
Items in briefs about MariaDB Galera wsrep_notify_cmd shell injection (CVSS 10.0)
No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.