Cyber watch · 24/07/2026

Multiple vulnerabilities in Oracle MySQL

Multiple vulnerabilities have been discovered in Oracle MySQL. Summary of immediate actions for affected organizations.

Multiple vulnerabilities have been discovered in Oracle MySQL. They allow an attacker to cause a remote denial of service, compromise data confidentiality, and compromise data integrity.

Risks

  • Compromise data integrity
  • Compromised data confidentiality
  • Remote denial of service

Affected systems

  • MySQL Cluster versions 8.0.0 to 8.0.47
  • MySQL Cluster versions 8.4.0 to 8.4.10
  • MySQL Cluster versions 9.7.0 to 9.7.1
  • MySQL Connectors versions 9.7.0 to 9.7.1
  • MySQL Router versions 8.4.0 to 8.4.10
  • MySQL Router versions 9.7.0 to 9.7.1
  • MySQL Server versions 8.4.0 to 8.4.10
  • MySQL Server versions 9.7.0 to 9.7.1
  • Oracle Enterprise Manager for MySQL Database versions 13.5.4.0.0 to 13.5.5.0.0

Immediate recommendations

Refer to the publisher’s security bulletin to obtain fixes (see Documentation section on this page of the CERT-FR website : https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0916/)

← See all news