Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql84-serverUpgrade mysql97-serverUpgrade mysql97-clientUpgrade mysql84-client | Aug 7, 2026 | Aug 5, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.11Upgrade to MySQL version 9.7.2 | Jul 22, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade perl-DBD-MySQL-debugsourceUpgrade mysql-test-dataUpgrade mecabUpgrade mysqlUpgrade mysql8.4-debugsourceUpgrade mysql-develUpgrade mecab-develUpgrade rapidjson-develUpgrade mecab-debugsourceUpgrade mysql8.4-debuginfoUpgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-serverUpgrade perl-DBD-MySQL-debuginfoUpgrade mysql8.4-commonUpgrade mysql8.4-libsUpgrade perl-DBD-MySQLUpgrade mysql8.4Upgrade mysql-libsUpgrade mysql-commonUpgrade mecab-debuginfoUpgrade mysql8.4-test-debuginfoUpgrade mysql-debuginfoUpgrade mysql-serverUpgrade mysql8.4-errmsgUpgrade mysql-libs-debuginfoUpgrade mysql8.4-develUpgrade mysql-test-debuginfoUpgrade mysql8.4-devel-debuginfoUpgrade mysql-devel-debuginfoUpgrade mysql-errmsgUpgrade mysql8.4-testUpgrade mysql8.4-server-debuginfoUpgrade mysql-testUpgrade mysql-debugsourceUpgrade rapidjson-docUpgrade mysql8.4-test-dataUpgrade mysql8.4-libs-debuginfo | Jul 29, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-libs-debuginfoUpgrade mysql-debugsourceUpgrade mecab-debugsourceUpgrade mecab-develUpgrade mysql-devel-debuginfoUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mysql-develUpgrade mysql-server-debuginfoUpgrade mecabUpgrade rapidjson-develUpgrade mecab-ipadicUpgrade perl-DBD-MySQL-debuginfoUpgrade perl-DBD-MySQLUpgrade mysql-testUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mysqlUpgrade perl-DBD-MySQL-debugsource | Aug 21, 2026 | Aug 20, 2026 |
| Ubuntu | — | Upgrade mysql-serverUpgrade mysql-server-8.0 | Aug 31, 2026 | Jul 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 10, 2026 | Jul 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub