The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql80-clientUpgrade mysql96-serverUpgrade mysql84-serverUpgrade mysql80-serverUpgrade mysql96-clientUpgrade mysql84-client | May 21, 2026 | May 19, 2026 |
| Ubuntu | — | Upgrade mysql-server-8.0Upgrade mysql-server-8.0 (Ubuntu Pro)Upgrade mysql-server | Jun 2, 2026 | Jun 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub