https://vulnerability.circl.lu/sightings/feed 2026-08-29T05:11:09.044023+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/78b95620-a45c-4762-b326-55ddeed2d4a2/export 2026-08-29T05:11:09.070427+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "78b95620-a45c-4762-b326-55ddeed2d4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55860", "type": "seen", "source": "https://gist.github.com/alon710/607da531ae276a39a8c057ba4505abda", "content": "# CVE-2026-55860: CVE-2026-55860: Cleartext Password Disclosure in MariaDB Connector/R2DBC\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55860\n\n## Summary\nA security vulnerability in the MariaDB Connector/R2DBC client driver allows credential theft during the database authentication phase. The client driver does not gate clear-text password authentication plugins on transport encryption, making it possible for on-path attackers or hostile database servers to intercept passwords.\n\n## TL;DR\nMariaDB Connector/R2DBC before 1.4.1 fails to verify if TLS or Unix socket encryption is active before using clear-text password authentication plugins, allowing network attackers to intercept plaintext credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-319 / CWE-522\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **CVSS Score**: 5.9 (Medium)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing MariaDB Connector/R2DBC (Java driver) on plain TCP connections.\n- **MariaDB Connector/R2DBC**: < 1.4.1 (Fixed in: `1.4.1`)\n\n## Mitigation\n\n- Upgrade the MariaDB Connector/R2DBC client library to version 1.4.1 or above.\n- Enforce strict TLS verification modes in the driver configuration.\n- Isolate database traffic to secure, private subnets.\n\n**Remediation Steps:**\n1. Identify all JVM applications utilizing the 'org.mariadb:r2dbc-mariadb' dependency.\n2. Update the project build files (pom.xml or build.gradle) to reference version 1.4.1.\n3. Verify connection configurations and ensure 'sslMode' is set to 'VERIFY_FULL' or 'VERIFY_CA' rather than 'DISABLE' or 'TRUST'.\n4. Deploy the updated application and monitor connection logs for any authentication refusals.\n\n## References\n\n- [GitHub Security Advisory GHSA-c857-9x2m-cvh2](https://github.com/mariadb-corporation/mariadb-connector-r2dbc/security/advisories/GHSA-c857-9x2m-cvh2)\n- [Primary Fix Commit](https://github.com/mariadb-corporation/mariadb-connector-r2dbc/commit/be786603ec5530414996d2396157013e095b320a)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55860) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T01:40:29.508228Z"} 2026-08-29T01:40:29.508228+00:00