Threats Tagged 'cve-2026-46863'

CVE-2026-46863 is a high-severity vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains patches for affected MySQL versions. Customers are strongly advised to apply these patches promptly to mitigate the risk. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.

CVE-2026-46850 is a critical vulnerability in Oracle MySQL Shell, specifically affecting version 2026.2.0+9.6.1. It allows a low privileged attacker with network access via HTTP to fully compromise MySQL Shell, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across many products. Oracle strongly recommends applying the provided patches promptly to mitigate this risk. Workarounds include blocking network protocols required for exploitation and restricting privileges, but these may affect functionality.