Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server, MySQL Cluster.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	mysql	<0:8.4.11-1.module+el9.8.0+24663+27effc5a	0:8.4.11-1.module+el9.8.0+24663+27effc5a
rpm rhel8	mysql	<0:8.4.11-1.module+el8.10.0+24662+2d989aa9	0:8.4.11-1.module+el8.10.0+24662+2d989aa9
rpm rhel10	mysql8.4	<0:8.4.11-1.el10_2	0:8.4.11-1.el10_2

Aliases

1. CVE-2026-601902. NVD-2026-601903. OSV-2026-60190

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.