EUVD-2026-24325
GHSA-wcjc-hfgv-f5wc
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Network-reachable via authenticated low-privileged session with low complexity; only partial confidentiality impact on a data subset with no integrity or availability consequence.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
AnalysisAI
Information disclosure in Oracle MySQL Server's Information Schema component exposes a subset of server data to authenticated low-privileged network attackers across three major release branches (8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0). The flaw is exploitable via multiple protocols with low attack complexity but requires a valid database account, limiting opportunistic mass exploitation. No public exploit exists and this vulnerability is absent from the CISA KEV catalog; an EPSS score of 0.03% at the 8th percentile reflects negligible observed exploitation pressure.
Technical ContextAI
MySQL Server's Information Schema is a read-only set of virtual tables providing metadata about databases, tables, columns, privileges, and server internals. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) indicates insufficient access enforcement on Information Schema views or underlying system catalog queries, allowing a low-privileged user to retrieve data beyond their intended authorization scope. This class of flaw typically arises when privilege checks are applied inconsistently across metadata access paths - for example, when a user can query INFORMATION_SCHEMA.COLUMNS or similar views to enumerate objects they cannot otherwise access. The CPE string cpe:2.3:a:oracle_corporation:mysql_server identifies all affected Oracle MySQL Server builds across the 8.0, 8.4, and 9.x release branches. Tags referencing Red Hat and SUSE indicate the vulnerability is present in downstream distribution packages for those platforms.
RemediationAI
Apply the Oracle Critical Patch Update released in April 2026, detailed at https://www.oracle.com/security-alerts/cpuapr2026.html. Exact fixed release versions are not independently confirmed from the available intelligence - the Oracle advisory should be consulted for precise upgrade targets beyond 8.0.45, 8.4.8, and 9.6.0 respectively. Red Hat and SUSE customers should additionally monitor their vendor errata channels for updated MySQL packages. As a compensating control where patching cannot be applied immediately, restrict MySQL network access to known trusted application and administrative hosts using firewall rules or MySQL's own bind-address and host-based account restrictions, reducing the network attack surface. Auditing and minimizing low-privileged account grants - particularly for accounts with no business need to query Information Schema - further limits exposure. Neither workaround eliminates the underlying flaw and patching remains the authoritative fix.
More in Mysql Server
View allA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerabi
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. Rated critical severity (
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerabi
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when
libcurl-using applications can ask for a specific client certificate to be used in a transfer. Rated high severity (CVSS
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FT
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Rated critical severity (CVSS 9.8), this vul
A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Medium| Product | Status |
|---|---|
| SUSE Liberty Linux 9 | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today