CVE-2026-34232

CVE-2026-34232 affects Firebird open-source relational database management system in versions prior to 5.0.4, 4.0.7, and 3.0.14. The vulnerability exists in the xdr_status_vector() function, which fails to properly handle the isc_arg_cstring type when decoding op_response packets, resulting in a denial of service condition through server crashes. The vulnerability carries a CVSS score of 7.5 (HIGH) with a network-based attack vector requiring no authentication or user interaction. The attack has low complexity, making it relatively straightforward to execute. The impact is limited to availability, as the vulnerability causes service disruption rather than compromising data confidentiality or integrity. There is no evidence of active exploitation in the wild, as the vulnerability is not listed on CISA's Known Exploited Vulnerabilities catalog and remains inactive on community tracking lists. The EPSS score of 0.00056 indicates minimal probability of exploitation in the near term. Organizations using affected Firebird versions should prioritize patching to the fixed versions to mitigate this remotely exploitable denial of service risk.