Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to com…
CVE-2026-46869
Açıklama
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Oracle Corporation | MySQL Shell | 8.4.0 – ≤ 8.4.9, 9.0.0 – ≤ 9.7.0 |
Kaynaklar ve yamalar
- Oracle Advisory vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:oracle:mysql_shell:*:*:*:*:*:-:*:*≥ 8.4.0 ≤ 8.4.9cpe:2.3:a:oracle:mysql_shell:*:*:*:*:*:-:*:*≥ 9.0.0 ≤ 9.7.0