CVE-2026-47064: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the MySQL Server/MySQL Cluster availability impact by preventing network access to the MySQL services from untrusted networks (e.g., restrict inbound connectivity to required client IPs using firewall/network ACLs).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47064?
The severity of CVE-2026-47064 is rated as medium, with a score of 6.5.
How do I fix CVE-2026-47064?
To fix CVE-2026-47064, upgrade your MySQL Server or MySQL Cluster to a version that is not affected by this vulnerability.
What versions are affected by CVE-2026-47064?
CVE-2026-47064 affects MySQL Server versions 8.4.0-8.4.10 and 9.7.0-9.7.1, as well as MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1.
What component of MySQL does CVE-2026-47064 affect?
CVE-2026-47064 affects the Optimizer component of the MySQL Server.
Is CVE-2026-47064 easily exploitable?
Yes, CVE-2026-47064 is considered easily exploitable and can be exploited by low privileged users.