CVE-2026-46869

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-46869
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46869.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-46869
Aliases
Downstream
Published
2026-06-16T19:27:37.762Z
Modified
2026-07-15T02:20:24.862577399Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46869.json",
    "cna_assigner": "oracle",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "8.4.0"
                },
                {
                    "last_affected": "8.4.9"
                },
                {
                    "introduced": "9.0.0"
                },
                {
                    "last_affected": "9.7.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "introduced": "8.4.0"
                },
                {
                    "last_affected": "8.4.9"
                },
                {
                    "introduced": "9.0.0"
                },
                {
                    "last_affected": "9.7.0"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/mysql/mysql-shell

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-shell
Events
Introduced
ba0cd08174207752f92894f61844d2bed08d8279
Last affected
43fb6f5a02d42634732d5f96982ee09f21796d5e
Introduced
5b84e0be59fc0e027ef3f4920df15f7be97624c1
Last affected
34878957917ffb96d7bb168e6e2fc8f627c429ee
Database specific 
{
    "cpe": "cpe:2.3:a:oracle:mysql_shell:*:*:*:*:*:-:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "8.4.0"
        },
        {
            "last_affected": "8.4.9"
        },
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.7.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46869.json"