CVE-2026-46862
Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in MySQL Router

Publication date: 2026-06-17

Last updated on: 2026-06-18

Assigner: Oracle

Description
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Router. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-17
Last Modified
2026-06-18
Generated
2026-07-08
AI Q&A
2026-06-17
EPSS Evaluated
2026-07-06
NVD
CVE-2026-46862
EUVD
EUVD-2026-37355

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
oracle mysql_router From 8.4.0 (inc) to 8.4.9 (inc)
oracle mysql_router From 9.0.0 (inc) to 9.7.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the MySQL Router product of Oracle MySQL, specifically affecting versions 8.4.0 through 8.4.9 and 9.0.0 through 9.7.0. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via TLS to compromise the MySQL Router.

The attacker can cause the MySQL Router to hang or crash repeatedly, resulting in a complete denial of service (DoS).

Impact Analysis

The primary impact of this vulnerability is on availability. An attacker can cause the MySQL Router to hang or crash frequently, leading to a complete denial of service.

This means that legitimate users may be unable to access services relying on the MySQL Router, potentially disrupting business operations.

Compliance Impact

The vulnerability in MySQL Router allows an unauthenticated attacker to cause a denial of service (DoS) by crashing the service, impacting availability.

Since the vulnerability affects availability but does not impact confidentiality or integrity, its direct effect on compliance with standards like GDPR or HIPAA—which emphasize data protection and privacy—is limited.

However, availability is a component of many compliance frameworks, so repeated or prolonged denial of service could potentially affect compliance related to system availability requirements.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46862. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart