The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1196:01 advisory.

    * MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function     vulnerability (CVE-2026-32710)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19021 advisory.

    galera     [26.4.25-1]
    - Rebased to 26.4.25

    [26.4.24-1]
    - Rebase to 26.4.24

    [26.4.23-1]
    - Rebase to 26.4.23

    [26.4.22-1]
    - Rebase to 26.4.22

    [26.4.21-2]
    - Add sysusers.d config file to allow rpm to create users/groups automatically

    mariadb11.8     [3:11.8.6-2]
    - Added a fix for SIGSEGV when using skip-grant-tables
    - Resolves: RHBZ#2438390

    [3:11.8.6-1]
    - Rebase to 11.8.6

    [3:11.8.5-1]
    - Rebase to 11.8.5

    [3:11.8.3-7]
    - Bump release for rebuild

    [3:11.8.3-6]
    - Bump release for rebuild

    [3:11.8.3-5]
    - Revert to soft static allocation of MariaDB and MySQL sysusers.d files

    [3:11.8.3-4]
    - Bump release for tmpfiles.d change

    [3:11.8.3-1]
    - Initial commit on c10s
    - Resolves: RHEL-115468

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1367-1 advisory.

    Update to version 11.8.6.

    - https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6
    - https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6

    Security issues fixed:

    - CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code     execution       (bsc#1260081).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:21407-1 advisory.

    This update for mariadb fixes the following issue:

    - Update to v11.8.6
    - CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code     execution (bsc#1260081).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:19182 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    Security Fix(es):

    * MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function     vulnerability (CVE-2026-32710)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19182 advisory.

    galera     [26.4.25-1.0.1]
    - Drop nmap-ncat requirement. [Orabug: 34116228]
    - Requirement to delete lp1184034 test case without using patches.

    [26.4.25-1]
    - Rebased to 26.4.25

    [26.4.24-1]
    - Rebase to 26.4.24

    [26.4.23-1]
    - Rebase to 26.4.23

    mariadb     [3:11.8.6-2]
    - Added a fix for SIGSEGV when using skip-grant-tables
    - Resolves: RHBZ#2438390

    [3:11.8.6-1]
    - Rebase to 11.8.6

    [3:11.8.5-1]
    - Rebase to 11.8.5

    [3:11.8.3-7]
    - Bump release for rebuild

    [3:11.8.3-6]
    - Bump release for rebuild

    [3:11.8.3-5]
    - Revert to soft static allocation of MariaDB and MySQL sysusers.d files

    [3:11.8.3-4]
    - Bump release for tmpfiles.d change

    [3:11.8.3-1]
    - Initial commit on stream-mariadb-11.8-rhel-9.8.0
    - Resolves: RHEL-96956

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_19021 advisory.

    * MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function     vulnerability (CVE-2026-32710)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_19182 advisory.

    * MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function     vulnerability (CVE-2026-32710)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
325186	MiracleLinux 9 : mariadb:11.8 galera-26.4.25-1.module+el9+1156+5d43ddb4, mariadb-11.8.6-2.module+el9+1156+5d43ddb4 (AXSA:2026-1196:01)	Nessus	Miracle Linux Local Security Checks	7/6/2026	7/6/2026	critical
327006	Oracle Linux 10 : galera / and / mariadb11.8 (ELSA-2026-19021)	Nessus	Oracle Linux Local Security Checks	7/15/2026	7/15/2026	critical
306707	SUSE SLES15 Security Update : mariadb (SUSE-SU-2026:1367-1)	Nessus	SuSE Local Security Checks	4/16/2026	4/16/2026	critical
311747	SUSE SLES16 Security Update : mariadb (SUSE-SU-2026:21407-1)	Nessus	SuSE Local Security Checks	5/2/2026	5/2/2026	critical
315477	RHEL 9 : mariadb:11.8 (RHSA-2026:19182)	Nessus	Red Hat Local Security Checks	5/19/2026	5/19/2026	critical
322199	Oracle Linux 9 : mariadb:11.8 (ELSA-2026-19182)	Nessus	Oracle Linux Local Security Checks	6/23/2026	6/23/2026	critical
354989	Rocky Linux 10.2 [CIQ] Security Update: galera / galera-debuginfo / galera-debugsource / mariadb11.8 / etc (crlsa-2026_19021)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical
355182	Rocky Linux 9 [CIQ] Security Update: galera / galera-debuginfo / galera-debugsource / mariadb / etc (crlsa-2026_19182)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical