CVE-2026-107819
Description
A flaw was found in MariaDB Connector/C. During automatic Transport Layer Security (TLS) connection setup, the library verifies certificate trust but fails to confirm that the server hostname matches the certificate before switching authentication methods. An active man-in-the-middle (MitM) attacker with a valid certificate for a different domain can exploit this vulnerability to intercept the encrypted connection, request plaintext authentication, and capture database passwords.
Statement
This vulnerability is evaluated as a Moderate impact because exploitation demands an active man-in-the-middle network position as well as a valid, trusted TLS certificate for an alternate domain. When client applications rely on libmariadb automatic SSL configuration, omitting hostname validation allows an interception proxy to solicit unhashed password authentication. Earlier enterprise versions, such as those in Red Hat Enterprise Linux 8 and 9, predate the addition of this zero-configuration functionality and are not affected.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.9 | N/A | 5.9 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | High | N/A | High |
| Privileges Required | None | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | None | N/A | None |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
cve.org: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
