CVE-2026-61081: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high...

PT-2026-62138

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

PT-2026-62399

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can le...

PT-2026-62746

Name of the Vulnerable Software and Affected Versions MySQL Router versions 8.4.0 through 8.4.10 MySQL Router versions 9.7.0 through 9.7.1 Description An unauthenticated attacker with network access via HTTP can compromise the MySQL Router. This issue allows for unauthorized access to critical da...

CVE-2026-60182: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

PT-2026-62661

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/J versions 9.7.0 through 9.7.1 Description A flaw in the MySQL Connectors product allows a low privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead to...

CVE-2026-47008: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols t...

CVE-2026-60171: Uncontrolled Resource Consumption

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.47. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attac...

PT-2026-62253

Name of the Vulnerable Software and Affected Versions MySQL Cluster versions 8.0.0 through 8.0.47 Description An issue exists in the Server: Optimizer component of MySQL Cluster. A high privileged attacker with network access via multiple protocols can exploit this flaw to cause a hang or a...

PT-2026-62264

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

CVE-2026-61096: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows...

PT-2026-62275

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description A flaw in the MySQL Connectors product allows a low privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead t...

PT-2026-62396

Name of the Vulnerable Software and Affected Versions MySQL Router versions 8.4.0 through 8.4.10 MySQL Router versions 9.7.0 through 9.7.1 Description An unauthenticated attacker with network access via HTTP can compromise the system. This issue allows the attacker to cause a hang or a frequently...

CVE-2026-60185: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60191: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

Alibaba Cloud Linux 3 : 0191: mysql:8.0 (ALINUX3-SA-2026:0191)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0191 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-21998: Vulnerability in the MySQL...

Linux Distros Unpatched Vulnerability : CVE-2020-14844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...

The vulnerability of the Shell component: the Dump and Load feature of the Oracle MySQL Shell’s command-line and code editor, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Shell component: The “Dump and Load” feature of the Oracle MySQL Shell command-line and code editor interface is related to the manipulation of inter-site queries. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protect...

The vulnerability of the Shell component for VS Code’s command-line and code editor client, Oracle MySQL Shell, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Shell component for VS Code, a command-line and code editor client of Oracle MySQL Shell, allows a hacker to gain full control over the system.

The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the system...