CVE-2026-47847
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Bitnami | bitnami/mariadb-galera | 10.6.0< 10.6.27-photon-5-r0 | affected |
10.11.0< 10.11.17-photon-5-r1 | affected | ||
11.4.0< 11.4.12-photon-5-r0 | affected | ||
11.8.0< 11.8.7-photon-5-r1 | affected | ||
12.3.0< 12.3.2-photon-5-r0 | affected | ||
| Bitnami | bitnami/mariadb-galera Helm chart | < 18.3.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-47847
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default. Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Bitnami | bitnami/mariadb-galera | 10.6.0 ~ 10.6.27-photon-5-r0 | - | |
| Bitnami | bitnami/mariadb-galera Helm chart | 0 ~ 18.3.0 | - |
II. Public POCs for CVE-2026-47847
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-47847
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-47847 (1)
IV. Related Vulnerabilities
Same weakness: CWE-798
- CVE-2026-47846
Bitnami Cassandra默认超级用户漏洞 - CVE-2025-10560
Hardcoded cloud credentials in Worksnaps client application - CVE-2026-5667
Information Disclosure, Information Tampering, or Denial-of- - CVE-2026-22312
Use of Hard-coded Credentials Vulnerability in Radiflow iSAP - CVE-2026-50083
Aqara hardcoded OAuth client credentials
V. Comments for CVE-2026-47847
No comments yet