CVE Intelligence

Amazon Aurora Mysql vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Aurora Mysql: 1 record(s), with affected versions and fixes.
cpe:2.3:a:amazon:aurora_mysql

CVE-2026-3494 Medium · 4.3 CWE-778 Mar 3, 2026
MariaDB Server Audit Plugin Comment Handling Bypass
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.