Unauthorized Access Vulnerability in MariaDB Server
CVE-2026-32710
Key Information:
Badges
What is CVE-2026-32710?
An issue has been identified in the JSON_SCHEMA_VALID() function of MariaDB Server, which is derived from MySQL. This vulnerability allows authenticated users to crash versions 11.4 prior to 11.4.10 and 11.8 prior to 11.8.6 of MariaDB server. While under specific conditions, it could lead to remote code execution, these conditions necessitate precise control over the memory layout, typically achievable only in a lab setting. The vulnerability has been addressed in the updated releases of MariaDB version 11.4.10, 11.8.6, and 12.2.2.
Affected Version(s)
server >= 11.4.1, < 11.4.10 < 11.4.1, 11.4.10
server >= 11.8.1, < 11.8.6 < 11.8.1, 11.8.6
server >= 12.1.2, < 12.2.2 < 12.1.2, 12.2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.