PT-2026-49977 · Oracle · Mysql Shell

CVE-2026-46869

·

Published

2026-06-16

·

Updated

2026-06-22

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions MySQL Shell versions 8.4.0 through 8.4.9 MySQL Shell versions 9.0.0 through 9.7.0
Description An issue exists in the Shell: Dump and Load component of Oracle MySQL. An unauthenticated attacker with network access via multiple protocols can compromise MySQL Shell, provided there is human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible by MySQL Shell.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-08646
BIT-MYSQL-SHELL-2026-46869
CVE-2026-46869

Affected Products

Mysql Shell