Critical Security Vulnerability in MySQL: Red Hat Advisory RHSA-2026:23332
Summary
RHSA-2026:23332: Red Hat Security Advisory: mysql security update. Affects mysql versions < 0:8.0.46-1.el9_8. Fixed in 0:8.0.46-1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL is an open-source relational database management system that is widely used for managing and storing data. It is known for its reliability, flexibility, and ease of use. The impacted version of MySQL is part of the Red Hat Enterprise Linux 9 ecosystem, specifically within the appstream and crb repositories. This vulnerability affects multiple MySQL packages, including mysql, mysql-common, mysql-server, and others, which are essential for database operations.
Vulnerability Detail
The vulnerability identified in this advisory is associated with multiple CVEs, including CVE-2026-21998 and CVE-2026-22001, among others. These vulnerabilities can lead to potential data loss, unauthorized access, or denial of service, depending on the specific exploit. The vulnerabilities stem from improper handling of certain database operations, which could allow attackers to manipulate data or disrupt services. The CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
0:8.0.46-1.el9_8
This is the first release that contains the fix.
sudo dnf update mysqlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the MySQL server by configuring firewall rules to limit connections to trusted IP addresses only. This can help mitigate the risk of exploitation until the packages are updated.
Conclusion
In summary, the Red Hat Security Advisory RHSA-2026:23332 highlights critical vulnerabilities in MySQL packages that require immediate attention. Users are advised to update their systems to the latest patched version to mitigate risks associated with these vulnerabilities.
See every vulnerability recorded for mysql →
FAQ
The vulnerability involves multiple CVEs that can lead to data loss or unauthorized access due to improper handling of database operations.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity level.
You can update MySQL by running the command 'sudo dnf update mysql mysql-common mysql-server mysql-devel mysql-libs mysql-test' in your terminal.
If you cannot update immediately, consider restricting access to the MySQL server by configuring firewall rules to limit connections to trusted IP addresses.
Related vulnerabilities
Recent vulnerabilities recorded for mysql.
