Summary
It was discovered that MySQL Router incorrectly handled repeated TLS
protocol upgrade requests. An unauthenticated remote attacker could
possibly use this issue to cause MySQL Router to crash, resulting in a
denial of service. (CVE-2026-46862)
It was discovered that MySQL Server incorrectly handled connection
authentication. An unauthenticated remote attacker could possibly use this
issue to cause MySQL to crash, resulting in a denial of service.
(CVE-2026-46863)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | mysql-8.0 | 8.0.46-0ubuntu0.24.04.3 |
| Ubuntu · 25.10 | mysql-8.4 | 8.4.10-0ubuntu0.25.10.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | mysql-8.4 | 8.4.10-0ubuntu0.26.04.1 |
Vulnerabilities 2
-
High 7.5
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are aff…
-
High 7.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supp…