Description
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Router. Successful attacks of this vulnerability can result in takeover of MySQL Router. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | MySQL Router | 9.0.0 – ≤ 9.7.0 | — |
Advisories 2
- WID-SEC-2026-1946 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 23, 2026
- NCSC-2026-0205 Kwetsbaarheden verholpen in Oracle MySQL-producten NCSC-NL (Netherlands) · Jun 17, 2026
References
- Oracle Advisory vendor-advisory