CVE-2026-47023: Medium severity Oracle MySQL MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47023?
CVE-2026-47023 has a medium severity rating of 4.9.
How do I fix CVE-2026-47023?
To fix CVE-2026-47023, upgrade your MySQL Server or MySQL Cluster to a version that is not affected.
Which versions are affected by CVE-2026-47023?
CVE-2026-47023 affects MySQL Server versions 8.4.0-8.4.10 and 9.7.0-9.7.1, as well as MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1.
What component of Oracle MySQL is vulnerable in CVE-2026-47023?
The vulnerable component in CVE-2026-47023 is the Replication feature of the MySQL Server.
Is CVE-2026-47023 easily exploitable?
CVE-2026-47023 is considered easily exploitable due to its access vector and low attack complexity.