{"id":"CVE-2026-3494","revision":"a51b6df477f4476a95fa61e36f7461b9","records":[{"revision":"a51b6df477f4476a95fa61e36f7461b9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-3494","aliases":[],"title":"MariaDB Server Audit Plugin Comment Handling Bypass","description":"In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.","state":0,"publishedAt":"2026-03-03T18:12:12.361+00:00","modifiedAt":"2026-10-20T18:24:15.745+00:00","affected":[{"ecosystem":"Vendor product","name":"MariaDB Server","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"MariaDB Foundation\",\n                    \"product\": \"MariaDB Server\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"10.6.25\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"10.11.16\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"11.4.10\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"11.8.6\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Aurora MySQL","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Amazon\",\n                    \"product\": \"Aurora MySQL\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.12.6\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.04.6\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.10.3\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.11.1\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"RDS for MySQL","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Amazon\",\n                    \"product\": \"RDS for MySQL\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.7.44-RDS.20260212\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"8.0.45\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"8.4.8\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"RDS for MariaDB","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Amazon\",\n                    \"product\": \"RDS for MariaDB\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"10.6.25\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"10.11.16\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"11.4.10\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"11.8.6\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","score":4.3,"severity":"MEDIUM"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","score":5.3,"severity":"MEDIUM"}],"references":["https://aws.amazon.com/security/security-bulletins/2026-006-AWS/","https://github.com/MariaDB/server/commit/635559a2ad68a5a6d1a354e8209c58323dba0261","https://github.com/aws/audit-plugin-for-mysql/commit/01e25a5cb1073f131eea774c06c8a056b1e4b2ff"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-3494","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-3494","identifiers":["CVE-2026-3494"]},"retained":false,"historicalAffected":[]}],"coverage":[]}