CVE-2026-47052: Medium severity Oracle MySQL MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
If upgrading is not immediately possible, restrict network access to the MySQL Server/MySQL Cluster ports so only trusted hosts can reach InnoDB over the affected protocols.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47052?
The severity of CVE-2026-47052 is rated as medium with a score of 4.9.
What are the affected versions of CVE-2026-47052?
The affected versions include MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1.
How do I fix CVE-2026-47052?
To fix CVE-2026-47052, upgrade your MySQL Server and MySQL Cluster to the latest patched versions provided by Oracle.
What type of vulnerability is CVE-2026-47052?
CVE-2026-47052 is classified as an easily exploitable vulnerability allowing a high privileged attacker to potentially cause harm.
What components are impacted by CVE-2026-47052?
CVE-2026-47052 affects the InnoDB component of the Oracle MySQL Server and Oracle MySQL Cluster.