{"metadata": {"vulnerability": "CVE-2026-85748", "count": 17, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-04T14:50:16.720Z", "date_only": false, "value": "2026-09-04T14:50:16.720Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85748", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T16:28:55.829Z", "date_only": false, "value": "2026-10-16T16:28:55.829Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85748", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T16:28:55.829Z", "date_only": false, "value": "2026-10-16T16:28:55.829Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-85748", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:38:22.604Z", "date_only": false, "value": "2026-10-16T16:38:22.604180Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451568039692775", "record": "CVE-2026-85748", "field": "creation_timestamp", "uuid": "fcbab2ed-7f78-4833-8a08-6f0b095ce3fd", "content": "CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch one to trigger a use-after-free that can enable remote code execution when combined with another vulnerability. This issue is fixed in versions 12.3.3 and 13.0.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85748https://github.com/MariaDB/server/security/advisories/GHSA-mv8g-9f7q-hprmhttps://github.com/MariaDB/server/commit/91156c3de58762196605150ab3f756fe952592d1https://github.com/MariaDB/server/commit/9b075b2cb53338f67e7230cc585e02d2d34514edhttps://github.com/MariaDB/server/releases/tag/mariadb-12.3.3https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2https://jira.mariadb.org/browse/MDEV-40396https://jira.mariadb.org/browse/MDEV-40639#mariadb #MariaDB #server#CVE_2026_85748#bot", "url": "https://infosec.exchange/users/cve/statuses/117451568039692775"}, {"timestamp": "2026-10-16T16:54:30.361Z", "date_only": false, "value": "2026-10-16T16:54:30.361781Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85748", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:54:30.361Z", "date_only": false, "value": "2026-10-16T16:54:30.361781Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85748", "record": "FKIE_CVE-2026-85748", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T16:54:40.841Z", "date_only": false, "value": "2026-10-16T16:54:40.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85748", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:54:40.841Z", "date_only": false, "value": "2026-10-16T16:54:40.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85748", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:17:51.303Z", "date_only": false, "value": "2026-10-16T17:17:51.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85748", "record": "FKIE_CVE-2026-85748", "field": "published"}, {"timestamp": "2026-10-16T18:08:13.707Z", "date_only": false, "value": "2026-10-16T18:08:13.707368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxz6a4woi22x", "record": "CVE-2026-85748", "field": "creation_timestamp", "uuid": "1bf1bd87-5c11-4cb2-ba21-dd8029b3e9d3", "content": "\ud83d\udea8 CVE-2026-85748 \u2014 CVSS 9.9 CRITICAL\n\nMariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFC...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85748\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxz6a4woi22x"}, {"timestamp": "2026-10-16T19:40:04.567Z", "date_only": false, "value": "2026-10-16T19:40:04.567573Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzdee6exz2z", "record": "CVE-2026-85748", "field": "creation_timestamp", "uuid": "7a27ec1b-9634-4b0e-b476-0b52a28683ad", "content": "CVE-2026-85748 - server\nMariaDB server versions 12.3.1 through 12.3.3 and 13.0.1 allow a low\u2011privilege user to open many SYS_REFCURSOR objects and then trigger a memory error that could lead to remote code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#server #mariadb #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzdee6exz2z"}, {"timestamp": "2026-10-17T06:05:39.407Z", "date_only": false, "value": "2026-10-17T06:05:39.407654Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-85748", "record": "BELL-CVE-2026-85748", "field": "published"}, {"timestamp": "2026-10-20T15:31:37.252Z", "date_only": false, "value": "2026-10-20T15:31:37.252390Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-85748", "record": "BELL-CVE-2026-85748", "field": "modified"}, {"timestamp": "2026-10-20T15:31:37.252Z", "date_only": false, "value": "2026-10-20T15:31:37.252390Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-85748", "record": "BELL-CVE-2026-85748", "field": "withdrawn"}, {"timestamp": "2026-10-20T15:32:54.420Z", "date_only": false, "value": "2026-10-20T15:32:54.420", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85748", "record": "FKIE_CVE-2026-85748", "field": "lastModified"}, {"timestamp": "2026-10-21T08:52:56.896Z", "date_only": false, "value": "2026-10-21T08:52:56.896Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MARIADB-2026-85748", "record": "BIT-MARIADB-2026-85748", "field": "published"}, {"timestamp": "2026-10-22T08:25:32.100Z", "date_only": false, "value": "2026-10-22T08:25:32.100Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MARIADB-2026-85748", "record": "BIT-MARIADB-2026-85748", "field": "modified"}]}