CVE-2026-46869

EUVD-2026-37362
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load).  Supported versions that are affected are 8.4.0-8.4.9 and  9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Shell.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 7.76%
Affected Products (NVD)
VendorProductVersion
oraclemysql_shell
8.4.0 ≤
𝑥
≤ 8.4.9
oraclemysql_shell
9.0.0 ≤
𝑥
≤ 9.7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mysql-5.5
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
ignored
mysql-5.7
bionic
ignored
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
ignored
mysql-8.0
focal
not-affected
jammy
not-affected
noble
not-affected
questing
dne
resolute
dne
mysql-8.4
jammy
dne
noble
dne
questing
not-affected
resolute
not-affected
mariadb
jammy
dne
noble
not-affected
questing
not-affected
resolute
not-affected
mariadb-10.0
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
not-affected
mariadb-10.1
bionic
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.3
focal
ignored
jammy
dne
noble
dne
questing
dne
resolute
dne
mariadb-10.6
jammy
not-affected
noble
dne
questing
dne
resolute
dne
percona-xtradb-cluster-5.6
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
not-affected
percona-server-5.6
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
not-affected