Is CVE-2026-47847 actively exploited?

No active exploitation of CVE-2026-47847 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-47847 be exploited remotely?

Yes. CVE-2026-47847 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-47847?

CVE-2026-47847 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-47847

MEDIUM

CVE-2026-47847

CWE-798Published: June 18, 2026· Updated: Jun 22, 2026

5.3

CVSS v3.1

Official Description

Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.

Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.

NVD Source

Technical Analysis

CVE-2026-47847 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.