mysql-install-component-scheme

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-install-component-scheme mysql-install-component-scheme Class: RCE Reach: Remote MySQL Community Server mysqld 26.7.0 06a5c1c - Oracle Default file:// INSTALL COMPONENT is wrapped by mysqlserverpathfilter and...

mysql-set-role-leftover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-set-role-leftover mysql-set-role-leftover Class: Privilege leftover FILE as mysqld UID; not OS LPE Reach: Remote MySQL Community Server mysqld 26.7.0 06a5c1c - Oracle SET ROLE ALL EXCEPT rfile or SET ROLE DEFAUL...

PT-2026-115899

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

UBUNTU-CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

RLSA-2026:67608 Important: leapp-repository security update

Repositories for leapp Security Fixes: leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate-config as root and can load mysql-writable plugins CVE-2026-75092 For more details about the security issues, including the impact, a CVSS score,...

leapp-repository security update

An update is available for leapp-repository. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Repositories for leapp Security Fixes: leapp-repository:...

leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

CVE-2026-75092

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

CVE-2026-75092

CVE-2026-75092 is a local privilege escalation flaw in the scan_mysql actor of leapp-upgrade-el9toel10 (from the leapp-repository package). During RHEL 9 to RHEL 10 upgrades, the actor runs mysqld --validate-config directly as root , bypassing the packaged systemd unit that normally starts the da...

CVE-2026-75092: Execution with Unnecessary Privileges

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

RHEL 9 : leapp-repository (RHSA-2026:67608)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67608 advisory. Repositories for leapp Security Fixes: leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scanmysql runs mysqld --validate- config ...

CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3

Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CQ67878 Security fixes in prometheus-mysqld-exporter 0.17.2-r2

Package prometheus-mysqld-exporter version 0.17.2-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-FG88760 Security fixes in prometheus-mysqld-exporter 0.15.0-r3

Package prometheus-mysqld-exporter version 0.15.0-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39833, CVE-2026-39821, CVE-2026-42506...

CLEANSTART-2026-SC64306 Security fixes in prom-mysqld-exporter-fips 0.18.0-r3

Package prom-mysqld-exporter-fips version 0.18.0-r3 fixes 10 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-CK92485 Security fixes in prometheus-mysqld-exporter 0.19.0-r2

Package prometheus-mysqld-exporter version 0.19.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-BQ50426 Security fixes in prom-mysqld-exporter-fips 0.18.0-r1

Package prom-mysqld-exporter-fips version 0.18.0-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-AV37069 Security fixes in prometheus-mysqld-exporter 0.16.0-r2

Package prometheus-mysqld-exporter version 0.16.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-YG84759 Security fixes in prometheus-mysqld-exporter 0.18.0-r1

Package prometheus-mysqld-exporter version 0.18.0-r1 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-26958...

CLEANSTART-2026-BH92291 Security fixes in prometheus-mysqld-exporter 0.15.0-r4

Package prometheus-mysqld-exporter version 0.15.0-r4 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...