{"id":"CVE-2026-46862","aliases":["EUVD-2026-37355","GHSA-658f-6m2q-8572","UBUNTU-CVE-2026-46862","USN-8457-1","USN-8457-2"],"status":"published","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). ...","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00463,"percentile":0.40452,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-06-16T19:27:35Z","modified":"2026-10-25T23:10:00Z","fixes":[{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.20.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.24.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"mysql-8.4","fixed_in":["8.4.10-0ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","fixed_in":["8.4.10-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1","5.5.50-0ubuntu0.14.04.1","5.5.52-0ubuntu0.14.04.1","5.5.53-0ubuntu0.14.04.1","5.5.54-0ubuntu0.14.04.1","5.5.55-0ubuntu0.14.04.1","5.5.57-0ubuntu0.14.04.1","5.5.58-0ubuntu0.14.04.1","5.5.59-0ubuntu0.14.04.1","5.5.60-0ubuntu0.14.04.1","5.5.61-0ubuntu0.14.04.1","5.5.62-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1","5.7.13-0ubuntu0.16.04.2","5.7.15-0ubuntu0.16.04.1","5.7.16-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.2","5.7.18-0ubuntu0.16.04.1","5.7.19-0ubuntu0.16.04.1","5.7.20-0ubuntu0.16.04.1","5.7.21-0ubuntu0.16.04.1","5.7.22-0ubuntu0.16.04.1","5.7.23-0ubuntu0.16.04.1","5.7.24-0ubuntu0.16.04.1","5.7.25-0ubuntu0.16.04.2","5.7.26-0ubuntu0.16.04.1","5.7.27-0ubuntu0.16.04.1","5.7.28-0ubuntu0.16.04.2","5.7.29-0ubuntu0.16.04.1","5.7.30-0ubuntu0.16.04.1","5.7.31-0ubuntu0.16.04.1","5.7.32-0ubuntu0.16.04.1","5.7.33-0ubuntu0.16.04.1","5.7.35-0ubuntu0.16.04.1+esm1","5.7.36-0ubuntu0.16.04.1+esm1","5.7.37-0ubuntu0.16.04.1+esm1","5.7.38-0ubuntu0.16.04.1+esm1","5.7.39-0ubuntu0.16.04.1+esm2","5.7.40-0ubuntu0.16.04.1+esm1","5.7.41-0ubuntu0.16.04.1+esm1","5.7.42-0ubuntu0.16.04.1+esm1","5.7.43-0ubuntu0.16.04.1+esm1","5.7.44-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.19-0ubuntu1","5.7.20-0ubuntu0.17.10.1","5.7.20-1ubuntu1","5.7.21-1ubuntu1","5.7.22-0ubuntu18.04.1","5.7.23-0ubuntu0.18.04.1","5.7.24-0ubuntu0.18.04.1","5.7.25-0ubuntu0.18.04.2","5.7.26-0ubuntu0.18.04.1","5.7.27-0ubuntu0.18.04.1","5.7.28-0ubuntu0.18.04.4","5.7.29-0ubuntu0.18.04.1","5.7.30-0ubuntu0.18.04.1","5.7.31-0ubuntu0.18.04.1","5.7.32-0ubuntu0.18.04.1","5.7.33-0ubuntu0.18.04.1","5.7.34-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.2","5.7.36-0ubuntu0.18.04.1","5.7.37-0ubuntu0.18.04.1","5.7.38-0ubuntu0.18.04.1","5.7.39-0ubuntu0.18.04.2","5.7.40-0ubuntu0.18.04.1","5.7.41-0ubuntu0.18.04.1","5.7.42-0ubuntu0.18.04.1","5.7.43-0ubuntu0.18.04.1+esm1","5.7.44-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm3"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2","8.0.46-0ubuntu0.20.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.3"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1","8.0.46-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.3"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1","8.0.46-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.4.5-1","1:11.8.1-4","1:11.8.1-5ubuntu2","1:11.8.2-1ubuntu1","1:11.8.3-1","1:11.8.3-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1","8.4.9-0ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1","8.4.9-0ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.3"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1","8.0.46-0ubuntu0.22.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.3"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1","8.0.46-0ubuntu0.24.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1","8.4.9-0ubuntu0.25.10.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1","8.4.9-0ubuntu0.26.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm3"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2","8.0.46-0ubuntu0.20.04.1+esm2"],"bundled":2}],"products":[{"vendor":"oracle","product":"mysql_router"},{"vendor":"oracle corporation","product":"mysql router"}],"references":[{"url":"https://www.oracle.com/security-alerts/cspujun2026.html","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46862"},{"url":"https://github.com/advisories/GHSA-658f-6m2q-8572"},{"url":"https://ubuntu.com/security/CVE-2026-46862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46862","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8457-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8457-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46863","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-46862","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-16T19:27:35.563Z","modified":"2026-06-17T14:52:09.095Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T13:47:06.353366Z"}],"euvd":[{"id":"EUVD-2026-37355","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-16T19:27:35Z","modified":"2026-06-17T14:52:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:38.239877Z"}],"ghsa":[{"id":"GHSA-658f-6m2q-8572","title":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). ...","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-17T18:35:32Z","modified":"2026-06-17T18:35:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:08:49.97619Z"}],"nvd":[{"id":"CVE-2026-46862","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-17T10:54:03.863Z","modified":"2026-10-25T23:10:00.167Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:12:24.19758Z"}],"osv":[{"id":"UBUNTU-CVE-2026-46862","description":"Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-19T00:00:00Z","modified":"2026-07-12T01:30:06.592817546Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:30.797112Z"},{"id":"USN-8457-1","title":"mysql-8.0, mysql-8.4 vulnerabilities","description":"It was discovered that MySQL Router incorrectly handled repeated TLS\nprotocol upgrade requests. An unauthenticated remote attacker could\npossibly use this issue to cause MySQL Router to crash, resulting in a\ndenial of service. (CVE-2026-46862)\n\nIt was discovered that MySQL Server incorrectly handled connection\nauthentication. An unauthenticated remote attacker could possibly use this\nissue to cause MySQL to crash, resulting in a denial of service.\n(CVE-2026-46863)","status":"published","published":"2026-06-22T13:11:43Z","modified":"2026-06-22T20:19:14.923677939Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8457-2","title":"mysql-8.0 vulnerabilities","description":"\nUSN-8457-1 fixed several vulnerabilities in MySQL. This update\nprovides the corresponding fixes for MySQL on Ubuntu 20.04 LTS\n\nOriginal advisory details:\n\n It was discovered that MySQL Router incorrectly handled repeated TLS\n protocol upgrade requests. An unauthenticated remote attacker could\n possibly use this issue to cause MySQL Router to crash, resulting in a\n denial of service. (CVE-2026-46862)\n\n It was discovered that MySQL Server incorrectly handled connection\n authentication. An unauthenticated remote attacker could possibly use this\n issue to cause MySQL to crash, resulting in a denial of service.\n (CVE-2026-46863)","status":"published","published":"2026-06-24T06:38:35Z","modified":"2026-06-24T15:44:22.855844286Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}