CVE-2026-55857: Mariadb Cleartext Auth Plugin Missing Require Securecve-2026-55857-mariadb-cleartext-auth-plugin-missing-require-secure
Authentication plugin for cleartext credentials ('dialog' or 'mysql_clear_password') does not enforce a secure connection requirement via requireSecure() or requireSsl() returning true, allowing sensitive credentials to be sent over unencrypted transports.