MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

The version of MariaDB installed on the remote host is prior to 11.4.10. It is, therefore, affected by a vulnerability as referenced in the GHSA-4rj5-2227-9wgc advisory.

  - MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB     versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under     certain conditions it might be possible to turn the crash into a remote code execution. These conditions     require tight control over memory layout which is generally only attainable in a lab environment. This     issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2. (CVE-2026-32710)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 11.8.6. It is, therefore, affected by a vulnerability as referenced in the GHSA-4rj5-2227-9wgc advisory.

  - MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB     versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under     certain conditions it might be possible to turn the crash into a remote code execution. These conditions     require tight control over memory layout which is generally only attainable in a lab environment. This     issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2. (CVE-2026-32710)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 12.2.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-4rj5-2227-9wgc advisory.

  - MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB     versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under     certain conditions it might be possible to turn the crash into a remote code execution. These conditions     require tight control over memory layout which is generally only attainable in a lab environment. This     issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2. (CVE-2026-32710)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB     versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under     certain conditions it might be possible to turn the crash into a remote code execution. These conditions     require tight control over memory layout which is generally only attainable in a lab environment. This     issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2. (CVE-2026-32710)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
305875	MariaDB 11.4.1 < 11.4.10 DoS	Nessus	Databases	critical
305874	MariaDB 11.8.1 < 11.8.6 DoS	Nessus	Databases	critical
305873	MariaDB 12.1.2 < 12.2.2 DoS	Nessus	Databases	critical
303254	Linux Distros Unpatched Vulnerability : CVE-2026-32710	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-32710

critical

Tenable Plugins

critical

critical

critical

critical