Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel8	mysql	<0:8.4.11-1.module+el8.10.0+24662+2d989aa9	0:8.4.11-1.module+el8.10.0+24662+2d989aa9
rpm rhel10	mysql8.4	<0:8.4.11-1.el10_2	0:8.4.11-1.el10_2
rpm rhel9	mysql	<0:8.4.11-1.module+el9.8.0+24663+27effc5a	0:8.4.11-1.module+el9.8.0+24663+27effc5a

Aliases

1. CVE-2026-469362. NVD-2026-469363. OSV-2026-46936

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.