Threats Tagged 'cve-2026-46862'

CVE-2026-46862 is a high-severity vulnerability in Oracle MySQL Router versions 8.4.0 through 8.4.9 and 9.0.0 through 9.7.0. It allows an unauthenticated attacker with network access via TLS to cause a denial of service by hanging or crashing MySQL Router. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains patches for affected products including MySQL Router. Customers are strongly advised to apply these patches promptly to mitigate the risk. Until patches are applied, risk may be reduced by blocking required network protocols or restricting privileges, although these mitigations may impact functionality.

CVE-2026-46850 is a critical vulnerability in Oracle MySQL Shell, specifically affecting version 2026.2.0+9.6.1. It allows a low privileged attacker with network access via HTTP to fully compromise MySQL Shell, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across many products. Oracle strongly recommends applying the provided patches promptly to mitigate this risk. Workarounds include blocking network protocols required for exploitation and restricting privileges, but these may affect functionality.