Red Hat Security Advisory: galera and mariadb11.8 security update
A security vulnerability (CVE-2026-32710) exists in MariaDB 11.8 related to the JSON_SCHEMA_VALID() function that could allow remote code execution or denial of service. This vulnerability affects Red Hat Enterprise Linux 9 distributions using the mariadb:11.8 module. Red Hat has issued a security advisory with an update to address this issue. The severity is rated as moderate by Red Hat Product Security.
AI Analysis
Technical Summary
This vulnerability in MariaDB, a multi-user SQL database server forked from MySQL, allows remote code execution or denial of service through the JSON_SCHEMA_VALID() function. The flaw is due to a buffer handling issue (CWE-120). Red Hat's security advisory RHSA-2026:19021 provides updated packages for Red Hat Enterprise Linux 10 to remediate this vulnerability. The advisory rates the impact as moderate and includes multiple updated packages for various architectures. No CVSS score is provided in the advisory.
Potential Impact
Successful exploitation could allow an attacker to execute arbitrary code remotely or cause a denial of service condition on affected MariaDB servers. This could impact the availability and integrity of database services running on Red Hat Enterprise Linux 10 systems using the affected MariaDB versions.
Mitigation Recommendations
Red Hat has released updated packages for MariaDB and galera as part of Red Hat Enterprise Linux 10 updates to address this vulnerability. Users should apply these official security updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. Since this is an official fix, applying the update fully mitigates the vulnerability.
Red Hat Security Advisory: galera and mariadb11.8 security update
Description
A security vulnerability (CVE-2026-32710) exists in MariaDB 11.8 related to the JSON_SCHEMA_VALID() function that could allow remote code execution or denial of service. This vulnerability affects Red Hat Enterprise Linux 9 distributions using the mariadb:11.8 module. Red Hat has issued a security advisory with an update to address this issue. The severity is rated as moderate by Red Hat Product Security.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in MariaDB, a multi-user SQL database server forked from MySQL, allows remote code execution or denial of service through the JSON_SCHEMA_VALID() function. The flaw is due to a buffer handling issue (CWE-120). Red Hat's security advisory RHSA-2026:19021 provides updated packages for Red Hat Enterprise Linux 10 to remediate this vulnerability. The advisory rates the impact as moderate and includes multiple updated packages for various architectures. No CVSS score is provided in the advisory.
Potential Impact
Successful exploitation could allow an attacker to execute arbitrary code remotely or cause a denial of service condition on affected MariaDB servers. This could impact the availability and integrity of database services running on Red Hat Enterprise Linux 10 systems using the affected MariaDB versions.
Mitigation Recommendations
Red Hat has released updated packages for MariaDB and galera as part of Red Hat Enterprise Linux 10 updates to address this vulnerability. Users should apply these official security updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. Since this is an official fix, applying the update fully mitigates the vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:19182
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a4049db27e9c7971982fdfe
Added to database: 06/27/2026, 22:08:27 UTC
Last enriched: 07/06/2026, 00:33:50 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.