CVE-2026-55860
MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)
CVSS score
5.9
EPSS probability
%0.2
Risk score
0.0
Published
1 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
9.0
CVE-2021-45046 Actively exploitedIncomplete fix for Apache Log4j vulnerability
Workaround Public Exploits:6EPSS %100
9.8
CVE-2024-56325Apache Pinot Vulnerable to Authentication Bypass
Patch status unknown Public Exploits:1EPSS %80
7.5
CVE-2020-13935Vulnerability in N/a Apache Tomcat
Patch verifiedEPSS %87
7.5
CVE-2024-38819Spring Framework Path Traversal vulnerability
Patch verified Public Exploits:1EPSS %56
7.0
CVE-2020-9484Vulnerability in N/a Apache Tomcat
Patch verified Public Exploits:1EPSS %56
7.5
CVE-2021-25122Apache Tomcat h2c request mix-up
Patch verifiedEPSS %18
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-55860"