{"id":"CVE-2026-34318","aliases":["BELL-CVE-2026-34318","BIT-mysql-shell-2026-34318","EUVD-2026-24418","GHSA-m58j-v3j6-3hqq","OESA-2026-2256","UBUNTU-CVE-2026-34318","USN-8363-1","USN-8363-2"],"status":"published","title":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ...","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","severity":{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00263,"percentile":0.18337,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2026-04-21T20:35:39Z","modified":"2026-10-29T10:45:43Z","fixes":[{"ecosystem":"Bitnami","package":"mysql-shell","fixed_in":["8.0.46","8.4.9","9.7.0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"mysql","fixed_in":["8.0.46-1.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"mysql","fixed_in":["8.0.46-1.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"mysql","fixed_in":["8.0.46-1.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"mysql","fixed_in":["8.0.46-1.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"mysql","fixed_in":["8.0.46-1.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.20.04.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"mysql-8.4","fixed_in":["8.4.9-0ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","fixed_in":["8.4.9-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"mysql-shell","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.0.46"},{"introduced":"8.1.0"},{"fixed":"8.4.9"},{"introduced":"9.0.0"},{"fixed":"9.7.0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-1.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-1.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-1.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-1.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-1.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1","5.5.50-0ubuntu0.14.04.1","5.5.52-0ubuntu0.14.04.1","5.5.53-0ubuntu0.14.04.1","5.5.54-0ubuntu0.14.04.1","5.5.55-0ubuntu0.14.04.1","5.5.57-0ubuntu0.14.04.1","5.5.58-0ubuntu0.14.04.1","5.5.59-0ubuntu0.14.04.1","5.5.60-0ubuntu0.14.04.1","5.5.61-0ubuntu0.14.04.1","5.5.62-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1","5.7.13-0ubuntu0.16.04.2","5.7.15-0ubuntu0.16.04.1","5.7.16-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.2","5.7.18-0ubuntu0.16.04.1","5.7.19-0ubuntu0.16.04.1","5.7.20-0ubuntu0.16.04.1","5.7.21-0ubuntu0.16.04.1","5.7.22-0ubuntu0.16.04.1","5.7.23-0ubuntu0.16.04.1","5.7.24-0ubuntu0.16.04.1","5.7.25-0ubuntu0.16.04.2","5.7.26-0ubuntu0.16.04.1","5.7.27-0ubuntu0.16.04.1","5.7.28-0ubuntu0.16.04.2","5.7.29-0ubuntu0.16.04.1","5.7.30-0ubuntu0.16.04.1","5.7.31-0ubuntu0.16.04.1","5.7.32-0ubuntu0.16.04.1","5.7.33-0ubuntu0.16.04.1","5.7.35-0ubuntu0.16.04.1+esm1","5.7.36-0ubuntu0.16.04.1+esm1","5.7.37-0ubuntu0.16.04.1+esm1","5.7.38-0ubuntu0.16.04.1+esm1","5.7.39-0ubuntu0.16.04.1+esm2","5.7.40-0ubuntu0.16.04.1+esm1","5.7.41-0ubuntu0.16.04.1+esm1","5.7.42-0ubuntu0.16.04.1+esm1","5.7.43-0ubuntu0.16.04.1+esm1","5.7.44-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.19-0ubuntu1","5.7.20-0ubuntu0.17.10.1","5.7.20-1ubuntu1","5.7.21-1ubuntu1","5.7.22-0ubuntu18.04.1","5.7.23-0ubuntu0.18.04.1","5.7.24-0ubuntu0.18.04.1","5.7.25-0ubuntu0.18.04.2","5.7.26-0ubuntu0.18.04.1","5.7.27-0ubuntu0.18.04.1","5.7.28-0ubuntu0.18.04.4","5.7.29-0ubuntu0.18.04.1","5.7.30-0ubuntu0.18.04.1","5.7.31-0ubuntu0.18.04.1","5.7.32-0ubuntu0.18.04.1","5.7.33-0ubuntu0.18.04.1","5.7.34-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.2","5.7.36-0ubuntu0.18.04.1","5.7.37-0ubuntu0.18.04.1","5.7.38-0ubuntu0.18.04.1","5.7.39-0ubuntu0.18.04.2","5.7.40-0ubuntu0.18.04.1","5.7.41-0ubuntu0.18.04.1","5.7.42-0ubuntu0.18.04.1","5.7.43-0ubuntu0.18.04.1+esm1","5.7.44-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm2"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.2"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.2"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.9-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.9-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.2"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.2"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.9-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.9-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm2"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2"],"bundled":25}],"products":[{"vendor":"oracle","product":"mysql"},{"vendor":"oracle corporation","product":"mysql shell"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2026.html","tags":["vendor-advisory","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34318","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m58j-v3j6-3hqq"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-34318","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34318.json","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2256","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-34318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34318","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8363-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8363-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-21998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-22017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-35240","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-34318","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T20:35:39.679Z","modified":"2026-04-22T13:13:20.696Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:20:13.962274Z"}],"euvd":[{"id":"EUVD-2026-24418","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T20:35:39Z","modified":"2026-04-22T13:13:20Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:21.101387Z"}],"ghsa":[{"id":"GHSA-m58j-v3j6-3hqq","title":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). ...","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T21:31:27Z","modified":"2026-04-22T15:31:41Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:07:34.663272Z"}],"nvd":[{"id":"CVE-2026-34318","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T21:16:37.327Z","modified":"2026-10-26T21:10:00.17Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:12:15.493943Z"}],"osv":[{"id":"BELL-CVE-2026-34318","title":"CVE-2026-34318 does not affect BellSoft software","status":"withdrawn","published":"2026-04-25T06:10:16.470931Z","modified":"2026-05-06T07:18:04.314065Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-34318","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T20:35:39.679Z","modified":"2026-10-29T10:45:43.959084225Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:02.247031Z"},{"id":"OESA-2026-2256","title":"mysql security update","description":"MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if\r\n\r\nSecurity Fix(es):\n\nVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-34318)","status":"published","published":"2026-05-09T11:11:14Z","modified":"2026-08-18T01:19:57.504139248Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"UBUNTU-CVE-2026-34318","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-21T21:16:00Z","modified":"2026-06-03T17:59:16.960793627Z","cvss":[{"version":"3.1","score":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"BIT-mysql-shell-2026-34318","description":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell.  While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-04-23T08:45:32.225Z","modified":"2026-09-08T08:48:24.432969359Z","updated_at":"2026-11-02T15:28:34.007508Z"},{"id":"USN-8363-1","title":"mysql-8.0, mysql-8.4 vulnerabilities","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html\nhttps://www.oracle.com/security-alerts/cpuapr2026.html","status":"published","published":"2026-06-02T12:24:56Z","modified":"2026-06-02T16:14:18.425890325Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8363-2","title":"mysql-8.0 vulnerabilities","description":"USN-8363-1 fixed several vulnerabilities in MySQL. This update\nprovides the corresponding fixes for MySQL on Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in MySQL and this update includes\n new upstream MySQL versions to fix these issues.\n\n MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\n Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.\n\n In addition to security fixes, the updated packages contain bug fixes, new\n features, and possibly incompatible changes.\n\n Please see the following for more information:\n\n https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html\n https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html\n https://www.oracle.com/security-alerts/cpuapr2026.html","status":"published","published":"2026-06-03T07:43:47Z","modified":"2026-06-03T18:03:09.917955216Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}