EUVD-2026-46746
GHSA-9h9h-6f2c-xmhc
Severity by source
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Local vector and high privileges reflect mandatory infrastructure logon and DBA-level access; high complexity captures difficult-to-reproduce replication subsystem conditions for successful exploitation.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
Full takeover of MySQL Server and MySQL Cluster is possible through a difficult-to-exploit flaw in the Server: Replication component, affecting MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. Despite a moderate CVSS base score of 6.4, the impact triad is complete (C:H/I:H/A:H), meaning successful exploitation grants an attacker full control over data confidentiality, integrity, and service availability. No public exploit code exists and no confirmed active exploitation has been identified at time of analysis, with exploitation gated by local infrastructure access and high privilege requirements.
Technical ContextAI
The vulnerability affects Oracle MySQL's Server: Replication subsystem, which manages binary log (binlog) streaming, replication thread coordination, and data synchronization between primary and replica nodes in both standalone MySQL Server and the distributed MySQL Cluster architecture. MySQL Replication operates with elevated internal server privileges and manages persistent replication state, making it a sensitive attack surface for privileged actors. The CVSS vector (AV:L/AC:H/PR:H) indicates the flaw is triggered locally under specific, hard-to-reproduce conditions - potentially involving replication thread lifecycle, binlog event processing state, or configuration-dependent code paths. No CWE was provided, leaving the precise root cause class (e.g., memory corruption, logic error, privilege escalation within replication context) unconfirmed. Affected product lines span both the MySQL Server single-instance and MySQL Cluster multi-node configurations across the 8.0.x, 8.4.x, and 9.7.x release branches.
RemediationAI
Apply Oracle's July 2026 Critical Patch Update (CPU), which addresses this vulnerability per the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html. Exact fixed version numbers for MySQL Server and MySQL Cluster must be verified directly from that advisory, as they were not explicitly stated in the available intelligence data. As compensating controls pending patching: restrict OS-level logon access to MySQL host infrastructure to the minimum required personnel, enforce the principle of least privilege for all MySQL accounts including replication users, and audit existing high-privileged database accounts for unauthorized access. Hardening SSH access controls and enabling multi-factor authentication for privileged OS accounts reduces the local attack surface. Note that reducing replication account privileges beyond MySQL's documented minimum requirements may disrupt replication functionality and must be tested before deployment. In multi-tenant environments, isolate MySQL instances at the OS level to prevent cross-tenant privilege escalation.
More in Mysql Server
View allA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerabi
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. Rated critical severity (
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerabi
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when
libcurl-using applications can ask for a specific client certificate to be used in a transfer. Rated high severity (CVSS
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FT
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Rated critical severity (CVSS 9.8), this vul
A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Liberty Linux 10 | Fixed |
| SUSE Liberty Linux 8 | Fixed |
| SUSE Liberty Linux 9 | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today