IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
5.0Mittel

CVE-2026-34319

Oracle Corporation MySQL Shell Veröffentlicht: (vor 6 Monaten)

Beschreibung

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

Schwachstellentyp (CWE): CWE-204

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
oracle mysql 8.0.0 – ≤ 8.0.45
Oracle Corporation MySQL Shell 8.0.0 – ≤ 8.0.45, 8.4.0 – ≤ 8.4.8, 9.0.0 – ≤ 9.6.0

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 8.0.0 ≤ 8.0.45
  • cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.8
  • cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 9.0.0 ≤ 9.6.0

Neue CVEs im selben Produkt — MySQL

7.5Hoch
CVE-2026-83404
Oracle Corporation MySQL Connectors

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to com…

7.5Hoch
CVE-2026-101810
Oracle Corporation MySQL Router

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi…

2.5Niedrig
CVE-2026-101804
Oracle Corporation MySQL Connectors

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Conn…

6.8Mittel
CVE-2026-101806
Oracle Corporation MySQL Connectors

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to comp…

6.5Mittel
CVE-2026-101802
Oracle Corporation MySQL Server; Oracle Corporation MySQL Cluster

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and …

6.5Mittel
CVE-2026-101803
Oracle Corporation MySQL Server; Oracle Corporation MySQL Cluster

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26…