<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 13:49:35 +0000</lastBuildDate>
    <item>
      <title>ALSA-2026:56007 — Important: mysql8.4 security, bug fix, and enhancement update</title>
      <link>https://vulnerability.circl.lu/vuln/alsa-2026:56007</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:10: mysql8.4, AlmaLinux:10: mysql8.4-common, AlmaLinux:10: mysql8.4-devel, AlmaLinux:10: mysql8.4-errmsg, AlmaLinux:10: mysql8.4-libs, AlmaLinux:10: mysql8.4-server, AlmaLinux:10: mysql8.4-test, AlmaLinux:10: mysql8.4-test-data&lt;/p&gt;
&lt;p&gt;MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
  * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
  * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
  * mysql: Replication unspecified vulnerability (CP…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:10: mysql8.4, AlmaLinux:10: mysql8.4-common, AlmaLinux:10: mysql8.4-devel, AlmaLinux:10: mysql8.4-errmsg, AlmaLinux:10: mysql8.4-libs, AlmaLinux:10: mysql8.4-server, AlmaLinux:10: mysql8.4-test, AlmaLinux:10: mysql8.4-test-data&lt;/p&gt;
&lt;p&gt;MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)
  * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)
  * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)
  * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)
  * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)
  * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)
  * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)
  * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)
  * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)
  * mysql: Replication unspecified vulnerability (CP…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/alsa-2026:56007</guid>
    </item>
    <item>
      <title>certfr-2026-avi-0916 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer un déni…</title>
      <link>https://vulnerability.circl.lu/vuln/certfr-2026-avi-0916</link>
      <description>certfr-2026-avi-0916</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/certfr-2026-avi-0916</guid>
    </item>
    <item>
      <title>fkie_cve-2026-61094</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-61094</link>
      <description>&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-61094</guid>
    </item>
    <item>
      <title>GHSA-gj2w-2vrw-8hw2</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-gj2w-2vrw-8hw2</link>
      <description>&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-gj2w-2vrw-8hw2</guid>
    </item>
    <item>
      <title>NCSC-2026-0262 — Kwetsbaarheden verholpen in Oracle MySQL Server en MySQL Cluster</title>
      <link>https://vulnerability.circl.lu/vuln/ncsc-2026-0262</link>
      <description>NCSC-2026-0262</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ncsc-2026-0262</guid>
    </item>
    <item>
      <title>RHSA-2026:56007 — security update for mysql8.4</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2026:56007</link>
      <description>&lt;p&gt;security update for mysql8.4&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;security update for mysql8.4&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2026:56007</guid>
    </item>
    <item>
      <title>RLSA-2026:56007 — Important: mysql8.4 security, bug fix, and enhancement update</title>
      <link>https://vulnerability.circl.lu/vuln/rlsa-2026:56007</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:10: mysql8.4&lt;/p&gt;
&lt;p&gt;MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)&lt;/p&gt;
&lt;p&gt;* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)&lt;/p&gt;
&lt;p&gt;* mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)&lt;/p&gt;
&lt;p&gt;* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)&lt;/p&gt;
&lt;p&gt;* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)&lt;/p&gt;
&lt;p&gt;* mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)&lt;/p&gt;
&lt;p&gt;* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)&lt;/p&gt;
&lt;p&gt;* mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-202…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:10: mysql8.4&lt;/p&gt;
&lt;p&gt;MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)&lt;/p&gt;
&lt;p&gt;* mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)&lt;/p&gt;
&lt;p&gt;* mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)&lt;/p&gt;
&lt;p&gt;* mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)&lt;/p&gt;
&lt;p&gt;* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)&lt;/p&gt;
&lt;p&gt;* mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)&lt;/p&gt;
&lt;p&gt;* mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)&lt;/p&gt;
&lt;p&gt;* mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)&lt;/p&gt;
&lt;p&gt;* mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)&lt;/p&gt;
&lt;p&gt;* mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-202…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rlsa-2026:56007</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-61094</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-61094</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:Pro:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:16.04:LTS: percona-server-5.6, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:Pro:18.04:LTS: mysql-5.7, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:Pro:20.04:LTS: mysql-8.0, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6 and 5 more&lt;/p&gt;
&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:Pro:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:16.04:LTS: percona-server-5.6, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:Pro:18.04:LTS: mysql-5.7, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:Pro:20.04:LTS: mysql-8.0, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6 and 5 more&lt;/p&gt;
&lt;p&gt;Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-61094</guid>
    </item>
  </channel>
</rss>
