CLEANSTART-2026-DC22912: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Q: What does an attacker need to exploit this issue?

The available vector indicates network access is required. No privileges or user interaction are required, but exploitation has high attack complexity.

Q: What is the expected security impact?

The reported impact is limited to low availability impact. No confidentiality or integrity impact is indicated.

Published Nov 11, 2026

Updated

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

Affected Software

1 affected componentFixes available

cleanstart/keycloak<26.6.4-r6

26.6.4-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/keycloak to a version that resolves this vulnerability.
Fixed in 26.6.4-r6

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-119280

Frequently Asked Questions

What does an attacker need to exploit this issue?

The available vector indicates network access is required. No privileges or user interaction are required, but exploitation has high attack complexity.

What is the expected security impact?

The reported impact is limited to low availability impact. No confidentiality or integrity impact is indicated.

CLEANSTART-2026-DC22912: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?