{"vulnerability": "cve-2026-55856", "sightings": [{"uuid": "76b7bbd2-7af3-4a5f-8e27-7c0af3aa38a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55856", "type": "seen", "source": "https://gist.github.com/alon710/b4396cc6c765460048e24f2b654c8aa9", "content": "# CVE-2026-55856: CVE-2026-55856: Credential Disclosure via Out-of-Order Handshake in MariaDB Connector/J\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55856\n\n## Summary\nA critical credential disclosure vulnerability in MariaDB Connector/J allows remote attackers to capture raw database passwords. The driver transmits plaintext passwords prior to verifying TLS certificate fingerprints when configured in ephemeral trust fallback states.\n\n## TL;DR\nMariaDB Connector/J allows a Man-in-the-Middle attacker to intercept and steal plaintext database passwords because the driver transmits authentication responses during initial handshakes before enforcing certificate fingerprint verification checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-522\n- **Attack Vector**: Network\n- **Attack Complexity**: High\n- **Privileges Required**: None\n- **CVSS v3.1 Score**: 5.9 (Medium)\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- MariaDB Connector/J Java driver\n- **MariaDB Connector/J**: < 2.7.14 (Fixed in: `2.7.14`)\n- **MariaDB Connector/J**: >= 3.3.0, < 3.3.5 (Fixed in: `3.3.5`)\n- **MariaDB Connector/J**: >= 3.4.0, < 3.4.3 (Fixed in: `3.4.3`)\n- **MariaDB Connector/J**: >= 3.5.0, < 3.5.9 (Fixed in: `3.5.9`)\n\n## Mitigation\n\n- Upgrade MariaDB Connector/J dependencies to fixed versions.\n- Explicitly configure trusted certificates on client connections using the serverSslCert parameter.\n- Supply custom JVM trust stores to connections to disable ephemeral fallback trust managers.\n\n**Remediation Steps:**\n1. Locate Maven, Gradle, or manual jar configurations referencing vulnerable MariaDB Connector/J packages.\n2. Replace vulnerable versions with patched releases: 2.7.14, 3.3.5, 3.4.3, or 3.5.9.\n3. Update database connection strings to supply valid server certificates if using verify-ca or verify-full sslModes.\n\n## References\n\n- [NVD CVE-2026-55856](https://nvd.nist.gov/vuln/detail/CVE-2026-55856)\n- [GitHub Advisory GHSA-g9jj-cgmh-9f38](https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-g9jj-cgmh-9f38)\n- [MariaDB Jira Tracking Ticket CONJ-1325](https://jira.mariadb.org/browse/CONJ-1325)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55856) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T05:32:06.191781Z"}]}