IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
2.7Düşük

CVE-2026-101779

Oracle Corporation MySQL Server; Oracle Corporation MySQL Cluster Yayım: (25 gün önce)

Açıklama

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Zayıflık türü (CWE): CWE-284

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Oracle Corporation MySQL Cluster 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1
Oracle Corporation MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1

Ubuntu düzeltmeleri

  • USN-9046-1 MySQL vulnerabilities Ubuntu 26.10, 26.04, 24.04, 22.04 · 11.11.2026 · mysql-8.0, mysql-8.4, mysql-9.7

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (6)
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.12
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 9.7.0 ≤ 9.7.3
  • cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* ≥ 26.7.0 ≤ 26.7.1
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.12
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 9.7.0 ≤ 9.7.3
  • cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* ≥ 26.7.0 ≤ 26.7.1

Aynı üründe son açıklar — Ubuntu 22.04 LTS

7.7Yüksek
CVE-2026-109518

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

7.8Yüksek
CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.