Moderate Security Vulnerability in MySQL 8.4: Multiple Unspecified Issues
Summary
RLSA-2026:20693: Moderate: mysql8.4 security update. Affects mysql8.4 versions < 0:8.4.9-1.el10_2.rocky.0.1. Fixed in 0:8.4.9-1.el10_2.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely used multi-user, multi-threaded SQL database server that operates on a client/server model. It consists of a server daemon (mysqld) and various client programs and libraries. MySQL is known for its reliability, performance, and ease of use, making it a popular choice for web applications and enterprise solutions. However, recent security updates have identified multiple unspecified vulnerabilities in version 8.4 that could potentially compromise the integrity and availability of the database.
Vulnerability Detail
The vulnerabilities in MySQL 8.4 stem from various components, including InnoDB, the Information Schema, and the Optimizer. These unspecified vulnerabilities could lead to unauthorized access, data manipulation, or denial of service. The vulnerabilities were reported in the April 2026 Critical Patch Update (CPU) and are associated with several CVEs, indicating a range of potential impacts on database operations and security.
How To Fix
Minimum fixed version
0:8.4.9-1.el10_2.rocky.0.1
This is the first release that contains the fix.
sudo dnf update mysql8.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for these vulnerabilities. It is advisable to apply the security update as soon as possible to mitigate risks.
Conclusion
In summary, MySQL 8.4 has been identified with multiple unspecified vulnerabilities that pose a moderate risk to database security. It is essential to update to the latest patched version to mitigate these risks and ensure the integrity of your database operations.
See every vulnerability recorded for mysql8.4 →
FAQ
The CVSS score for the vulnerabilities is 6.5, indicating a moderate level of severity.
You can use Vulert, which allows you to monitor and alert in real-time for open-source vulnerabilities using a manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerabilities could lead to unauthorized access, data manipulation, or denial of service, affecting the integrity and availability of your database.
While no specific workarounds are available, it is crucial to monitor your database for any suspicious activity and apply the update as soon as possible.
The Rocky Enterprise Software Foundation and Red Hat are credited for identifying and addressing these vulnerabilities through security updates.
References
Related vulnerabilities
Recent vulnerabilities recorded for mysql8.4.
