Threats Tagged 'cve-2026-46871'

CVE-2026-46871 is a vulnerability in Oracle's MySQL Shell, specifically affecting version 2026.2.0+9.6.1. It allows a low privileged attacker with network access via multiple protocols to gain unauthorized access to critical or all accessible data within MySQL Shell. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has published a Critical Security Patch Update advisory recommending prompt patch application and possible network protocol blocking as interim mitigation.

CVE-2026-46850 is a critical vulnerability in Oracle MySQL Shell, specifically affecting version 2026.2.0+9.6.1. It allows a low privileged attacker with network access via HTTP to fully compromise MySQL Shell, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across many products. Oracle strongly recommends applying the provided patches promptly to mitigate this risk. Workarounds include blocking network protocols required for exploitation and restricting privileges, but these may affect functionality.