Threats Tagged 'cve-2026-46861'

Vulnerability in the MySQL NDB Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.11-8.0.46, 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL NDB Cluster. While the vulnerability is in MySQL NDB Cluster, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL NDB Cluster accessible data as well as unauthorized access to critical data or complete access to all MySQL NDB Cluster accessible data. CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).

CVE-2026-46850 is a critical vulnerability in Oracle MySQL Shell, specifically affecting version 2026.2.0+9.6.1. It allows a low privileged attacker with network access via HTTP to fully compromise MySQL Shell, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across many products. Oracle strongly recommends applying the provided patches promptly to mitigate this risk. Workarounds include blocking network protocols required for exploitation and restricting privileges, but these may affect functionality.