中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-46860

Oracle Corporation / MySQL Router

9.8 · CVSS 3.1Critical

Description

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Router. Successful attacks of this vulnerability can result in takeover of MySQL Router. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-46878Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.8
  • CVE-2026-46875Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.1
  • CVE-2026-46872Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.0
  • CVE-2026-46861Oracle Corporation / MySQL NDB ClusterCVSS 9.6
  • CVE-2026-46859Oracle Corporation / Oracle Agile PLMCVSS 9.8
  • CVE-2026-46858Oracle Corporation / APM - Application Performance ManagementCVSS 9.1
  • CVE-2026-46857Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.8
  • CVE-2026-46856Oracle Corporation / Oracle Enterprise Manager Base PlatformCVSS 9.6

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.