{
  "cveId": "CVE-2026-32710",
  "url": "https://patchblox.com/security/cve/CVE-2026-32710",
  "summary": "CVE-2026-32710 is fixed in 31 products on 1 platform, first by RHSA-2026:19021, released March 20, 2026. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "mariadb: MariaDB server is a community developed fork of MySQL server",
  "description": "MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.",
  "published": "2026-03-20T18:31:48Z",
  "severity": "critical",
  "cvss": 9.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "epss": 0.0089,
  "epssPercentile": 0.59622,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "galera",
      "release": "RHEL 10",
      "fixedVersion": "26.4.25-1.el10_2",
      "fix": "RHSA-2026:19021",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19021",
      "released": "2026-03-20T18:31:48Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "RHEL 9",
      "fixedVersion": "0:26.4.25-1.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "ol 10",
      "fixedVersion": "0:26.4.25-1.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "ol 9",
      "fixedVersion": "0:26.4.25-1.0.1.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "rocky 10",
      "fixedVersion": "0:26.4.25-1.el10_2",
      "fix": "RLSA-2026:19021",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-19021",
      "released": "2026-05-29T16:03:24Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "rocky 9",
      "fixedVersion": "0:26.4.25-1.module\u002Bel9.8.0\u002B40192\u002B484cc2de",
      "fix": "RLSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-19182",
      "released": "2026-05-28T15:43:06Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:11.8.6-0\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-32710",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-32710",
      "released": "2026-03-20T19:16:16Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "Debian 14",
      "fixedVersion": "1:11.8.6-1",
      "fix": "DEBIAN-CVE-2026-32710",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-32710",
      "released": "2026-03-20T19:16:16Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "rocky 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B40192\u002B484cc2de",
      "fix": "RLSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-19182",
      "released": "2026-05-28T15:43:06Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "sles 15.7",
      "fixedVersion": "11.8.6-150700.3.12.1",
      "fix": "SUSE-SU-2026:1367-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1367-1",
      "released": "2026-04-15T14:34:10Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-backup",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-backup",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-client-utils",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-client-utils",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-common",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-common",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-devel",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded-devel",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-errmsg",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-errmsg",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-gssapi-server",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-gssapi-server",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-oqgraph-engine",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-oqgraph-engine",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-pam",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-pam",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-galera",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-galera",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-utils",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-utils",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-test",
      "release": "RHEL 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B24146\u002Be179c349",
      "fix": "RHSA-2026:19182",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19182",
      "released": "2026-05-27T17:40:12Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-test",
      "release": "ol 9",
      "fixedVersion": "3:11.8.6-2.module\u002Bel9.8.0\u002B90895\u002B7148d2d3",
      "fix": "ELSA-2026-19182",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19182",
      "released": "2026-06-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8",
      "release": "RHEL 10",
      "fixedVersion": "11.8.6-2.el10_2",
      "fix": "RHSA-2026:19021",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-19021",
      "released": "2026-03-20T18:31:48Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8",
      "release": "rocky 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "RLSA-2026:19021",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-19021",
      "released": "2026-05-29T16:03:24Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-backup",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-client-utils",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-common",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-devel",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-embedded",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-embedded-devel",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-errmsg",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-gssapi-server",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-oqgraph-engine",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-pam",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-server",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-server-galera",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-server-utils",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb11.8-test",
      "release": "ol 10",
      "fixedVersion": "3:11.8.6-2.el10_2",
      "fix": "ELSA-2026-19021",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-19021",
      "released": "2026-07-08T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}