IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.5Mittel

CVE-2026-101778

Oracle Corporation MySQL Server; Oracle Corporation MySQL Cluster Veröffentlicht: (vor 25 Tagen)

Beschreibung

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Schwachstellentyp (CWE): CWE-284

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Oracle Corporation MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1
Oracle Corporation MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1

Ubuntu-Korrekturen

  • USN-9046-1 MySQL vulnerabilities Ubuntu 26.10, 26.04, 24.04, 22.04 · 11.11.2026 · mysql-8.0, mysql-8.4, mysql-9.7

Referenzen und Patches

CPE-Treffer (NVD) (7)
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 8.0.0 ≤ 8.0.49
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.12
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 9.7.0 ≤ 9.7.3
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 26.7.0 ≤ 26.7.1
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.12
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 9.7.0 ≤ 9.7.3
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 26.7.0 ≤ 26.7.1

Neue CVEs im selben Produkt — Ubuntu 22.04 LTS

7.7Hoch
CVE-2026-109518

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

7.8Hoch
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.