Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel8	mysql	<0:8.4.11-1.module+el8.10.0+24662+2d989aa9	0:8.4.11-1.module+el8.10.0+24662+2d989aa9
rpm rhel10	mysql8.4	<0:8.4.11-1.el10_2	0:8.4.11-1.el10_2
rpm rhel9	mysql	<0:8.4.11-1.module+el9.8.0+24663+27effc5a	0:8.4.11-1.module+el9.8.0+24663+27effc5a

Aliases

1. CVE-2026-610962. NVD-2026-610963. OSV-2026-61096

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.