Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | Disclosure2 |
| 2026-03-22 | 1 | Disclosure1 |
| 2026-03-24 | 1 | Patch1 |
| 2026-03-25 | 2 | Patch2 |
| 2026-03-27 | 1 | Disclosure1 |
| 2026-03-28 | 1 | Disclosure1 |
| 2026-03-29 | 1 | Patch1 |
| 2026-05-06 | 1 | PoC1 |
| 2026-05-07 | 1 | Disclosure1 |
| 2026-05-08 | 1 | PoC1 |
| 2026-05-12 | 1 | Disclosure1 |
CVE-2026-32710, Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted, created with raptor) https://github.com/dinosn/CVE-2026-32710
Post summary
The post shares a GitHub repository containing a proof‑of‑concept for CVE-2026-32710, a heap OOB write in MariaDB’s JSON_SCHEMA_VALID() that enables persistent privilege escalation.
PostgreSQL の脆弱性 CVE-2026-2005／2006 が FIX：Wiz の http://ZeroDay.Cloud イベント https://iototsecnews.jp/2026/05/04/wiz-zeroday-cloud-event-reveals-20-year-old-postgresql-vulnerabilities/ 世界中で広く利用されているデータベース PostgreSQL に、20 年近くも前から潜んでいた深刻な脆弱性が発見されました。問題の原因は、データベース内で暗号化や復号を行うためのエクステンション pgcrypto に存在する、データの長さを正しく確認しない不備にあります。具体的には、悪意を持って細工されたメッセージや文字データを処理しようとすると、あらかじめ用意されたメモリの範囲を超えてデータが書き込まれてしまうオーバーフローが発生します (CVE-2026-2005／CVE-2026-2006)。これにより、データベース権限の乗っ取りや、サーバ上での任意のコマンド実行に至る恐れがあります。また、 MariaDB でも、メモリ管理の不具合の脆弱性 (CVE-2026-32710) が見つかっています。ご利用のチームは、ご注意ください。 #CVE20262005 #CVE20262006 #CVE202632710 #PostgreSQL #Vulnerability #ZeroDayCloud
Post summary
The post announces the discovery of the long‑hidden PostgreSQL vulnerabilities CVE‑2026‑2005/2006, outlines the buffer‑overflow flaw in pgcrypto and the potential for RCE, but provides no exploits, patches, or evidence of active exploitation.
📌 تهديد استقرار قواعد بيانات MariaDB بسبب ثغرة خطيرة في JSON Schema أصدرت MariaDB تحديثات لمعالجة ثغرة (buffer overflow) عالية الخطورة، CVE-2026-32710. يستغل المهاجمون هذه الثغرات لتعطيل الخدمات أو تنفيذ تعليمات برمجية عن بعد. يُنصح بتطبيق التحديثات الأمنية الصادرة فورًا للتخفيف من المخاطر وحماية الأنظمة. 🔗 للمزيد: https://securityonline.info/mariadb-json-schema-validation-buffer-overflow-vulnerability-cve-2026-32710/
Post summary
The text announces a patch for MariaDB’s JSON Schema buffer overflow vulnerability (CVE‑2026‑32710), urging users to apply the update immediately to prevent exploitation.
MariaDB patches a high-severity buffer overflow (CVE-2026-32710) in its JSON validation function. Upgrade to 11.4.10 or 11.8.6 to prevent server crashes. #MariaDB #CyberSecurity #DatabaseSecurity #PatchAlert #InfoSec #Vulnerability #JSON #OpenSource #CVE https://securityonline.info/mariadb-json-schema-validation-buffer-overflow-vulnerability-cve-2026-32710/ https://t.co/aijQpEVxPo
Post summary
The tweet announces MariaDB’s patch for CVE-2026-32710, a high‑severity buffer overflow in JSON validation, and urges users to upgrade to versions 11.4.10 or 11.8.6 to mitigate the risk.
📌 تهديد استقرار قواعد بيانات MariaDB بسبب ثغرة خطيرة في JSON Schema 🛡️ الفئة: ثغرة 📝 الملخص: أصدرت MariaDB تحديثات حاسمة لمعالجة ثغرة تجاوز سعة المخزن المؤقت (buffer overflow) عالية الخطورة، مُتعقبة بالرمز CVE-2026-32710. تؤثر هذه الثغرة، المرتبطة بالتحقق من صحة مخطط JSON (JSON Schema validation)، بشكل مباشر على استقرار قواعد بيانات MariaDB مفتوحة المصدر. يستغل المهاجمون هذه الثغرات لتعطيل الخدمات أو تنفيذ تعليمات برمجية عن بعد. يُنصح بتطبيق التحديثات الأمنية الصادرة فورًا للتخفيف من المخاطر وحماية الأنظمة. 🗓️ تاريخ النشر: 24/03/2026 🔗 للمزيد: https://securityonline.info/mariadb-json-schema-validation-buffer-overflow-vulnerability-cve-2026-32710/
Post summary
MariaDB released critical updates to address CVE‑2026‑32710, a buffer overflow in JSON Schema validation, while noting that attackers are actively exploiting the flaw.
اكتشاف CVE-2026-32710: ثغرة في MariaDB تؤدي إلى تصعيد الامتيازات بشكل دائم. تم التحقق منها باستخدام أدوات متقدمة. CVE-2026-32710 exposes a vulnerability in MariaDB, leading to persistent privilege escalation. Verified through advanced tools. https://github.com/dinosn/CVE-2026-32710 #CyberSecurity #MariaDB #Vulnerability
Post summary
The post announces the discovery of CVE-2026-32710 in MariaDB, indicates persistent privilege escalation, and provides a GitHub link that likely contains a proof‑of‑concept, but does not mention active exploitation or patching.
Heap OOB write through a JSON schema validation function leading to persistent privesc - the attack surface hiding in database built-ins is consistently underestimated. CVE-2026-32710 is tracked on http://vulntracker.io. If MariaDB is anywhere in your stack, this one's worth a close look.
Post summary
The post reveals a newly tracked MariaDB vulnerability (CVE-2026-32710) involving a heap out‑of‑bounds write via JSON schema validation that can lead to persistent privilege escalation, but offers no PoC, exploit code, or patch information.
CVE-2026-32710: MariaDB Server Crash Flaw - What It Means for Your Business and How to Respond https://hubs.li/Q048LP7D0
Post summary
The article outlines the impact of the MariaDB Server Crash Flaw and offers remedial steps, likely emphasizing the need to apply vendor patches.
MariaDBに深刻度「高」のバッファオーバーフロー 脆弱性(CVE-2026-32710) https://rocket-boys.co.jp/security-measures-lab/mariadb-high-severity-buffer-overflow-vulnerability-cve-2026-32710/
Post summary
The text announces a high‑severity buffer overflow vulnerability (CVE‑2026‑32710) in MariaDB.
MariaDBに深刻度「高」のバッファオーバーフロー 脆弱性(CVE-2026-32710) https://rocket-boys.co.jp/security-measures-lab/mariadb-high-severity-buffer-overflow-vulnerability-cve-2026-32710/ #セキュリティ対策Lab #セキュリティ #Security #CybersecurityNews
Post summary
The post announces a high‑severity buffer overflow in MariaDB identified as CVE-2026-32710, but does not provide additional details, PoC, exploit code, or mitigation information.
CVE-2026-32710 MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in… https://www.cve.org/CVERecord?id=CVE-2026-32710
Post summary
The text discloses a crash vulnerability in MariaDB for authenticated users on specific versions, without providing PoC details or mitigation.
🟠 CVE-2026-32710 - High MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() func... https://www.thehackerwire.com/vulnerability/CVE-2026-32710/ https://t.co/VxwdAODURC
Post summary
The post announces a high‑severity crash vulnerability in MariaDB, detailing affected versions and the faulty JSON_SCHEMA_VALID() function, but lacks any PoC, exploit, or patch information.
[CVE-2026-32710: HIGH] Vulnerability alert: Authenticated users can crash MariaDB server before versions 11.4.10 & 11.8.6 via bug in JSON_SCHEMA_VALID() function, possible remote code execution. Fix availabl...#cve,CVE-2026-32710,#cybersecurity https://cvefind.com/CVE-2026-32710
Post summary
The post announces a high‑impact vulnerability (CVE‑2026‑32710) affecting MariaDB’s JSON_SCHEMA_VALID() function, allowing authenticated users to crash the server and potentially execute code, and notes that a patch is available.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mariadb | mariadb | - | - | - |
| App | mariadb | mariadb | 12.1.2 | - | - |