cve 2026 3494

MariaDB’s audit subsystem contains a subtle but consequential gap: authenticated users can execute queries prefixed with SQL comment markers and those statements may not be recorded by the server audit plugin when certain query-filtering options are enabled, creating an audit‑logging bypass...