# MariaDB 10.6 reaches end of life, leaving users without security patches

> **Key takeaway:** MariaDB 10.6 is officially end-of-life, meaning any new security vulnerabilities discovered will not be patched for this version.

**Published:** 2026-10-31T13:07:49+00:00 
**Source:** MariaDB Official Server Releases 
**Category:** databases-storage 
**Canonical URL:** https://fosswire.org/news/mariadb-106-reaches-end-of-life-leaving-users-without-securi.html 

## Summary
The MariaDB Community Server 10.6 series has officially reached its end-of-life (EOL) status as of July 6, 2026. While the final release, version 10.6.28, included several critical security fixes, no further corrective releases or bug fixes will be issued for this branch by the MariaDB Foundation.

System administrators and hosting providers currently running 10.6 are advised to migrate to supported Long Term Support (LTS) versions. The project maintains four active LTS series: 10.11, 11.4, 11.8, and 12.3. Users can perform a direct upgrade from 10.6 to either 11.8 or 12.3 without requiring intermediate version hops.

## Security risks and supported LTS versions
- **Security Vulnerabilities:** Recent high-severity flaws, such as CVE-2026-92262 (filename encoding bypass) and CVE-2026-85746 (GIS object heap write overflow), are only patched in active LTS branches.
- **Supported Branches:** Current maintained LTS series include 12.3 (supported until 2029/2031), 11.8 (supported until 2028/2030), 11.4 (supported until 2029), and 10.11 (supported until 2028).
- **Upgrade Path:** MariaDB supports in-place data file upgrades from 10.6 directly to 11.8 or 12.3, avoiding the need for time-consuming dump-and-reload procedures.
- **Maintenance Lifecycle:** Starting with version 11.8, MariaDB has moved to a model of yearly LTS releases with three years of community binary support, whereas older series like 11.4 offer a five-year lifespan.

## Why it matters
For hosting platforms and DevOps engineers, remaining on 10.6 poses a significant risk as new CVEs will remain unpatched. Moving to 12.3 provides the longest support runway, while 11.8 offers a stable path already integrated into major Debian and Ubuntu LTS repositories.