Critical Security Update for MySQL: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:4828: Red Hat Security Advisory: mysql security update. Affects mysql versions < 0:8.0.45-1.el9_7. Fixed in 0:8.0.45-1.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is a widely-used open-source relational database management system that facilitates the storage and retrieval of data for various applications. It is known for its reliability, performance, and ease of use. However, recent vulnerabilities have been identified that could potentially compromise the security of systems utilizing MySQL, particularly in the Red Hat Enterprise Linux 9 ecosystem.
Vulnerability Detail
The vulnerabilities identified in MySQL include multiple CVEs (CVE-2026-21936, CVE-2026-21937, CVE-2026-21941, CVE-2026-21948, CVE-2026-21964, CVE-2026-21968) that could allow unauthorized access, data manipulation, or denial of service. These vulnerabilities stem from flaws in the database's handling of certain queries and user permissions, which could be exploited by attackers to gain elevated privileges or disrupt service. The potential ramifications include data breaches, loss of data integrity, and service outages, making it imperative for users to address these issues promptly.
How To Fix
Minimum fixed version
0:8.0.45-1.el9_7
This is the first release that contains the fix.
sudo dnf update mysqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the MySQL server by modifying the configuration file to limit connections to trusted IP addresses only. This can be done by editing the 'my.cnf' file and adding the following line under the [mysqld] section: 'bind-address = 127.0.0.1'. This will prevent external access while a permanent fix is applied.
Conclusion
In summary, the identified vulnerabilities in MySQL pose significant risks to data security and system integrity. It is crucial for users to update their MySQL installations to the latest patched version to mitigate these risks. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in real-time, ensuring ongoing security.
See every vulnerability recorded for mysql →
FAQ
The vulnerabilities include multiple CVEs that could allow unauthorized access, data manipulation, or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities.
The CVSS score for the vulnerabilities is 6.5, indicating a medium severity level.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
If an immediate update is not possible, implement the suggested workaround to restrict access to your MySQL server.
Related vulnerabilities
Recent vulnerabilities recorded for mysql.
