{"id":"CVE-2026-46863","aliases":["EUVD-2026-37356","GHSA-g4xv-4vff-3g76","UBUNTU-CVE-2026-46863","USN-8457-1","USN-8457-2"],"status":"published","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00471,"percentile":0.4103,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-06-16T19:27:35Z","modified":"2026-10-29T10:46:17Z","fixes":[{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.20.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","fixed_in":["8.0.46-0ubuntu0.24.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"mysql-8.4","fixed_in":["8.4.10-0ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","fixed_in":["8.4.10-0ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.32-0ubuntu7","5.5.34-0ubuntu1","5.5.34-0ubuntu2","5.5.35-0ubuntu1","5.5.35+dfsg-1ubuntu1","5.5.37-0ubuntu0.14.04.1","5.5.38-0ubuntu0.14.04.1","5.5.40-0ubuntu0.14.04.1","5.5.41-0ubuntu0.14.04.1","5.5.43-0ubuntu0.14.04.1","5.5.44-0ubuntu0.14.04.1","5.5.46-0ubuntu0.14.04.2","5.5.47-0ubuntu0.14.04.1","5.5.49-0ubuntu0.14.04.1","5.5.50-0ubuntu0.14.04.1","5.5.52-0ubuntu0.14.04.1","5.5.53-0ubuntu0.14.04.1","5.5.54-0ubuntu0.14.04.1","5.5.55-0ubuntu0.14.04.1","5.5.57-0ubuntu0.14.04.1","5.5.58-0ubuntu0.14.04.1","5.5.59-0ubuntu0.14.04.1","5.5.60-0ubuntu0.14.04.1","5.5.61-0ubuntu0.14.04.1","5.5.62-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.11-0ubuntu4","5.7.11-0ubuntu5","5.7.11-0ubuntu6","5.7.12-0ubuntu1","5.7.12-0ubuntu1.1","5.7.13-0ubuntu0.16.04.2","5.7.15-0ubuntu0.16.04.1","5.7.16-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.1","5.7.17-0ubuntu0.16.04.2","5.7.18-0ubuntu0.16.04.1","5.7.19-0ubuntu0.16.04.1","5.7.20-0ubuntu0.16.04.1","5.7.21-0ubuntu0.16.04.1","5.7.22-0ubuntu0.16.04.1","5.7.23-0ubuntu0.16.04.1","5.7.24-0ubuntu0.16.04.1","5.7.25-0ubuntu0.16.04.2","5.7.26-0ubuntu0.16.04.1","5.7.27-0ubuntu0.16.04.1","5.7.28-0ubuntu0.16.04.2","5.7.29-0ubuntu0.16.04.1","5.7.30-0ubuntu0.16.04.1","5.7.31-0ubuntu0.16.04.1","5.7.32-0ubuntu0.16.04.1","5.7.33-0ubuntu0.16.04.1","5.7.35-0ubuntu0.16.04.1+esm1","5.7.36-0ubuntu0.16.04.1+esm1","5.7.37-0ubuntu0.16.04.1+esm1","5.7.38-0ubuntu0.16.04.1+esm1","5.7.39-0ubuntu0.16.04.1+esm2","5.7.40-0ubuntu0.16.04.1+esm1","5.7.41-0ubuntu0.16.04.1+esm1","5.7.42-0ubuntu0.16.04.1+esm1","5.7.43-0ubuntu0.16.04.1+esm1","5.7.44-0ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-server-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.22-rel71.0-0ubuntu2","5.6.22-rel71.0-0ubuntu4","5.6.22-rel71.0-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"percona-xtradb-cluster-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.21-25.8-0ubuntu2","5.6.21-25.8-0ubuntu3","5.6.21-25.8-0ubuntu3.1","5.6.21-25.8-0ubuntu3.2","5.6.34-26.19-0ubuntu0.16.04.1","5.6.34-26.19-0ubuntu0.16.04.2","5.6.37-26.21-0ubuntu0.16.04.1","5.6.37-26.21-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mysql-5.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.19-0ubuntu1","5.7.20-0ubuntu0.17.10.1","5.7.20-1ubuntu1","5.7.21-1ubuntu1","5.7.22-0ubuntu18.04.1","5.7.23-0ubuntu0.18.04.1","5.7.24-0ubuntu0.18.04.1","5.7.25-0ubuntu0.18.04.2","5.7.26-0ubuntu0.18.04.1","5.7.27-0ubuntu0.18.04.1","5.7.28-0ubuntu0.18.04.4","5.7.29-0ubuntu0.18.04.1","5.7.30-0ubuntu0.18.04.1","5.7.31-0ubuntu0.18.04.1","5.7.32-0ubuntu0.18.04.1","5.7.33-0ubuntu0.18.04.1","5.7.34-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.1","5.7.35-0ubuntu0.18.04.2","5.7.36-0ubuntu0.18.04.1","5.7.37-0ubuntu0.18.04.1","5.7.38-0ubuntu0.18.04.1","5.7.39-0ubuntu0.18.04.2","5.7.40-0ubuntu0.18.04.1","5.7.41-0ubuntu0.18.04.1","5.7.42-0ubuntu0.18.04.1","5.7.43-0ubuntu0.18.04.1+esm1","5.7.44-0ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm3"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2","8.0.46-0ubuntu0.20.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.3"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1","8.0.46-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.3"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1","8.0.46-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.4.5-1","1:11.8.1-4","1:11.8.1-5ubuntu2","1:11.8.2-1ubuntu1","1:11.8.3-1","1:11.8.3-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1","8.4.9-0ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1","8.4.9-0ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.22.04.3"}]}],"versions":["8.0.26-0ubuntu1","8.0.27-0ubuntu0.21.10.1","8.0.28-0ubuntu3","8.0.28-0ubuntu4","8.0.29-0ubuntu0.22.04.1","8.0.29-0ubuntu0.22.04.2","8.0.29-0ubuntu0.22.04.3","8.0.30-0ubuntu0.22.04.1","8.0.31-0ubuntu0.22.04.1","8.0.32-0buntu0.22.04.1","8.0.32-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.1","8.0.33-0ubuntu0.22.04.2","8.0.33-0ubuntu0.22.04.4","8.0.34-0ubuntu0.22.04.1","8.0.35-0ubuntu0.22.04.1","8.0.36-0ubuntu0.22.04.1","8.0.37-0ubuntu0.22.04.3","8.0.39-0ubuntu0.22.04.1","8.0.40-0ubuntu0.22.04.1","8.0.41-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.1","8.0.42-0ubuntu0.22.04.2","8.0.43-0ubuntu0.22.04.1","8.0.43-0ubuntu0.22.04.2","8.0.44-0ubuntu0.22.04.1","8.0.44-0ubuntu0.22.04.2","8.0.45-0ubuntu0.22.04.1","8.0.46-0ubuntu0.22.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.24.04.3"}]}],"versions":["8.0.34-1ubuntu1","8.0.35-1ubuntu1","8.0.35-1ubuntu2","8.0.36-1","8.0.36-2ubuntu1","8.0.36-2ubuntu2","8.0.36-2ubuntu3","8.0.37-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.1","8.0.39-0ubuntu0.24.04.2","8.0.40-0ubuntu0.24.04.1","8.0.41-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.1","8.0.42-0ubuntu0.24.04.2","8.0.43-0ubuntu0.24.04.1","8.0.43-0ubuntu0.24.04.2","8.0.44-0ubuntu0.24.04.1","8.0.44-0ubuntu0.24.04.2","8.0.45-0ubuntu0.24.04.1","8.0.46-0ubuntu0.24.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.25.10.1"}]}],"versions":["8.4.4-0ubuntu2","8.4.5-0ubuntu1","8.4.5-0ubuntu2","8.4.5-0ubuntu3","8.4.6-0ubuntu1","8.4.6-0ubuntu3","8.4.7-0ubuntu0.25.10.2","8.4.7-0ubuntu0.25.10.3","8.4.8-0ubuntu0.25.10.1","8.4.9-0ubuntu0.25.10.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mysql-8.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.10-0ubuntu0.26.04.1"}]}],"versions":["8.4.6-0ubuntu3","8.4.7-0ubuntu2","8.4.7-0ubuntu3","8.4.8-0ubuntu1","8.4.9-0ubuntu0.26.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mysql-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.46-0ubuntu0.20.04.1+esm3"}]}],"versions":["8.0.17-0ubuntu2","8.0.17-0ubuntu3","8.0.18-0ubuntu3","8.0.18-0ubuntu4","8.0.18-0ubuntu5","8.0.19-0ubuntu2","8.0.19-0ubuntu3","8.0.19-0ubuntu4","8.0.19-0ubuntu5","8.0.20-0ubuntu0.20.04.1","8.0.21-0ubuntu0.20.04.3","8.0.21-0ubuntu0.20.04.4","8.0.22-0ubuntu0.20.04.2","8.0.22-0ubuntu0.20.04.3","8.0.23-0ubuntu0.20.04.1","8.0.25-0ubuntu0.20.04.1","8.0.26-0ubuntu0.20.04.2","8.0.26-0ubuntu0.20.04.3","8.0.27-0ubuntu0.20.04.1","8.0.28-0ubuntu0.20.04.3","8.0.29-0ubuntu0.20.04.2","8.0.29-0ubuntu0.20.04.3","8.0.30-0ubuntu0.20.04.2","8.0.31-0ubuntu0.20.04.1","8.0.31-0ubuntu0.20.04.2","8.0.32-0buntu0.20.04.1","8.0.32-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.1","8.0.33-0ubuntu0.20.04.2","8.0.33-0ubuntu0.20.04.4","8.0.34-0ubuntu0.20.04.1","8.0.35-0ubuntu0.20.04.1","8.0.36-0ubuntu0.20.04.1","8.0.37-0ubuntu0.20.04.3","8.0.39-0ubuntu0.20.04.1","8.0.40-0ubuntu0.20.04.1","8.0.41-0ubuntu0.20.04.1","8.0.42-0ubuntu0.20.04.1","8.0.43-0ubuntu0.20.04.1+esm1","8.0.45-0ubuntu0.20.04.1+esm2","8.0.46-0ubuntu0.20.04.1+esm2"],"bundled":2}],"products":[{"vendor":"oracle","product":"mysql_cluster"},{"vendor":"oracle","product":"mysql_server"},{"vendor":"oracle corporation","product":"mysql cluster"},{"vendor":"oracle corporation","product":"mysql server"}],"references":[{"url":"https://www.oracle.com/security-alerts/cspujun2026.html","tags":["vendor-advisory","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46863","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g4xv-4vff-3g76"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46863.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46863","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46863","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8457-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8457-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46862","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-46863","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-16T19:27:35.87Z","modified":"2026-06-17T14:52:56.766Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T13:46:55.086623Z"}],"euvd":[{"id":"EUVD-2026-37356","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-16T19:27:35Z","modified":"2026-06-17T14:52:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:38.239877Z"}],"ghsa":[{"id":"GHSA-g4xv-4vff-3g76","title":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-17T18:35:33Z","modified":"2026-06-17T18:35:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:08:49.97619Z"}],"nvd":[{"id":"CVE-2026-46863","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-17T10:54:03.967Z","modified":"2026-06-18T22:55:55.033Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:12:24.19758Z"}],"osv":[{"id":"CVE-2026-46863","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-16T19:27:35.87Z","modified":"2026-10-29T10:46:17.153346031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:06.231145Z"},{"id":"UBUNTU-CVE-2026-46863","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.9, 9.0.0-9.7.0; MySQL Cluster: 8.0.11-8.0.46, 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-06-18T00:00:00Z","modified":"2026-07-12T01:30:06.628039898Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:30.797112Z"},{"id":"USN-8457-1","title":"mysql-8.0, mysql-8.4 vulnerabilities","description":"It was discovered that MySQL Router incorrectly handled repeated TLS\nprotocol upgrade requests. An unauthenticated remote attacker could\npossibly use this issue to cause MySQL Router to crash, resulting in a\ndenial of service. (CVE-2026-46862)\n\nIt was discovered that MySQL Server incorrectly handled connection\nauthentication. An unauthenticated remote attacker could possibly use this\nissue to cause MySQL to crash, resulting in a denial of service.\n(CVE-2026-46863)","status":"published","published":"2026-06-22T13:11:43Z","modified":"2026-06-22T20:19:14.923677939Z","updated_at":"2026-11-02T16:58:25.103481Z"},{"id":"USN-8457-2","title":"mysql-8.0 vulnerabilities","description":"\nUSN-8457-1 fixed several vulnerabilities in MySQL. This update\nprovides the corresponding fixes for MySQL on Ubuntu 20.04 LTS\n\nOriginal advisory details:\n\n It was discovered that MySQL Router incorrectly handled repeated TLS\n protocol upgrade requests. An unauthenticated remote attacker could\n possibly use this issue to cause MySQL Router to crash, resulting in a\n denial of service. (CVE-2026-46862)\n\n It was discovered that MySQL Server incorrectly handled connection\n authentication. An unauthenticated remote attacker could possibly use this\n issue to cause MySQL to crash, resulting in a denial of service.\n (CVE-2026-46863)","status":"published","published":"2026-06-24T06:38:35Z","modified":"2026-06-24T15:44:22.855844286Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}