Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rapidjson-develUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-test-dataUpgrade perl-DBD-MySQLUpgrade mecab-develUpgrade mysql-develUpgrade mecabUpgrade rapidjson-docUpgrade mecab-ipadicUpgrade mysql-commonUpgrade mysql-testUpgrade mysqlUpgrade mysql-errmsg | Jun 7, 2026 | Jun 4, 2026 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql96-serverUpgrade mysql80-clientUpgrade mysql84-clientUpgrade mysql96-clientUpgrade mysql84-server | May 21, 2026 | May 19, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.9Upgrade to MySQL version 9.7.0Upgrade to MySQL version 8.0.46 | Apr 22, 2026 | Apr 21, 2026 |
| Redhat_linux | — | Upgrade mysql8.4-libsUpgrade mecabUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4Upgrade rapidjson-docUpgrade rapidjson-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-libs-debuginfoUpgrade mecab-ipadicUpgrade mysql-commonUpgrade mysql8.4-test-debuginfoUpgrade mysql-debuginfoUpgrade mecab-debugsourceUpgrade mysql8.4-test-dataUpgrade perl-DBD-MySQL-debugsourceUpgrade mysql8.4-develUpgrade mysql-develUpgrade mysql8.4-libs-debuginfoUpgrade perl-DBD-MySQL-debuginfoUpgrade mysql8.4-testUpgrade mysql-errmsgUpgrade mysql8.4-commonUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-test-dataUpgrade mysql8.4-errmsgUpgrade mysql8.4-serverUpgrade mysql8.4-debuginfoUpgrade mysql-testUpgrade mecab-develUpgrade mysql-libsUpgrade mysql8.4-server-debuginfoUpgrade perl-DBD-MySQLUpgrade mysqlUpgrade mysql-debugsourceUpgrade mysql-serverUpgrade mysql8.4-debugsource | May 28, 2026 | Apr 21, 2026 |
| Rocky_linux | — | Upgrade mysql-debugsourceUpgrade mecabUpgrade mysql-errmsgUpgrade mysql-server-debuginfoUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-develUpgrade mysql-libs-debuginfoUpgrade mysql8.4-testUpgrade mysql8.4-test-debuginfoUpgrade perl-DBD-MySQL-debugsourceUpgrade perl-DBD-MySQL-debuginfoUpgrade mecab-debugsourceUpgrade mysql8.4-serverUpgrade mysqlUpgrade mysql-commonUpgrade mecab-ipadicUpgrade mysql8.4-debuginfoUpgrade mysql-develUpgrade mecab-develUpgrade mysql-devel-debuginfoUpgrade mysql-debuginfoUpgrade mysql8.4Upgrade mysql8.4-libsUpgrade mysql-testUpgrade mysql8.4-server-debuginfoUpgrade mysql8.4-debugsourceUpgrade rapidjson-develUpgrade mecab-debuginfoUpgrade perl-DBD-MySQLUpgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-libs-debuginfoUpgrade mysql-libsUpgrade mysql-test-debuginfo | Jun 8, 2026 | Jun 4, 2026 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-serverUpgrade mysql-server-8.0 (Ubuntu Pro) | Jun 2, 2026 | Jun 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub