Amazon Relational Database Service vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Relational Database Service: 1 record(s), with affected versions and fixes.
cpe:2.3:a:amazon:relational_database_service

CVE-2026-3494 Medium · 4.3 CWE-778 Mar 3, 2026

MariaDB Server Audit Plugin Comment Handling Bypass

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.