PT-2026-49968 · Oracle · Mysql Router

Weiheng Qiu

·

CVE-2026-46860

·

Published

2026-06-16

·

Updated

2026-06-18

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MySQL Router versions 9.0.0 through 9.7.0
Description An issue in the General component of MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of MySQL Router.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-08662
CVE-2026-46860

Affected Products

Mysql Router