https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:09:56.340445+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:20693 ALSA-2026:20693 — Moderate: mysql8.4 security update 2026-10-03T04:09:56.494745+00:00

Affected: AlmaLinux:10: mysql8.4, AlmaLinux:10: mysql8.4-common, AlmaLinux:10: mysql8.4-devel, AlmaLinux:10: mysql8.4-errmsg, AlmaLinux:10: mysql8.4-libs, AlmaLinux:10: mysql8.4-server, AlmaLinux:10: mysql8.4-test, AlmaLinux:10: mysql8.4-test-data

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004) * mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001) * mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238) * mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002) * mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236) * mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240) * mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017) * mysql: Inno…

 https://cve.radiocsirt.org/vuln/bell-cve-2026-22002 Withdrawn: BELL-CVE-2026-22002 — CVE-2026-22002 does not affect BellSoft software 2026-10-03T04:09:56.494842+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2026-avi-0469 certfr-2026-avi-0469 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de… 2026-10-03T04:09:56.494862+00:00 certfr-2026-avi-0469 https://cve.radiocsirt.org/vuln/euvd-2026-292471 EUVD-2026-292471 2026-10-03T04:09:56.494879+00:00 EUVD-2026-292471 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22002 fkie_cve-2026-22002 2026-10-03T04:09:56.494890+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-4h9j-w885-pqx6 GHSA-4h9j-w885-pqx6 2026-10-03T04:09:56.494971+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-22002 msrc_CVE-2026-22002 — CVE-2026-22002 2026-10-03T04:09:56.495004+00:00 msrc_CVE-2026-22002 https://cve.radiocsirt.org/vuln/oesa-2026-2118 OESA-2026-2118 — mysql security update 2026-10-03T04:09:56.495030+00:00

Affected: openEuler:24.03-LTS-SP3: mysql

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL…

 https://cve.radiocsirt.org/vuln/rhsa-2026:20693 RHSA-2026:20693 — Red Hat Security Advisory: mysql8.4 security update 2026-10-03T04:09:56.495284+00:00

mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: Information Schema unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) mysql: JSON unspecified vulnerability (CPU Apr 2026) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) mysql: InnoDB unspecified vulnerability (CPU Apr 2026) mysql: DML unspecified vulnerability (CPU Apr 2026) mysql: Optimizer unspecified vulnerability (CPU Apr 2026)

 https://cve.radiocsirt.org/vuln/rlsa-2026:20693 RLSA-2026:20693 — Moderate: mysql8.4 security update 2026-10-03T04:09:56.495334+00:00

Affected: Rocky Linux:10: mysql8.4

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)

* mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)

* mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)

* mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)

* mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)

* mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)

* mysql: InnoDB unspecified vulner…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22002 UBUNTU-CVE-2026-22002 2026-10-03T04:09:56.495378+00:00

Affected: Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:Pro:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: percona-server-5.6, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:Pro:18.04:LTS: mysql-5.7, Ubuntu:Pro:20.04:LTS: mysql-8.0, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mysql-8.0, Ubuntu:24.04:LTS: mysql-8.0, Ubuntu:25.10: mysql-8.4 and 1 more

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1199 WID-SEC-W-2026-1199 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T04:09:56.495417+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.