This vulnerability (CVE-2026-47052) affects Oracle MySQL Server and MySQL Cluster components, specifically InnoDB, in the stated affected versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the MySQL Server or Cluster. The CVSS 3.1 base score is 4.9, reflecting a medium severity with an impact limited to availability (no confidentiality or integrity impact). The vulnerability is easily exploitable under the conditions described. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among many others but does not provide explicit patch or fix details for these affected MySQL versions. The advisory strongly recommends applying available patches promptly but does not confirm if a patch for this specific vulnerability is included or available.

Successful exploitation results in unauthorized ability to cause a hang or frequent crash of MySQL Server or MySQL Cluster, leading to a complete denial of service. There is no impact on confidentiality or integrity. The vulnerability requires high privileges and network access via multiple protocols to exploit.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay for supported products. However, the advisory does not explicitly confirm patch availability or remediation status for this specific vulnerability in the affected MySQL versions. Therefore, patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Until a patch is confirmed and applied, restrict network access to MySQL Server and Cluster instances to trusted users with high privileges to reduce exposure.