CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0441 Vulnerabilities Fixed in Oracle MySQL

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10892

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0441 Vulnerabilities Fixed in Oracle MySQL

Oracle released security patches for multiple MySQL products in October 2026, addressing vulnerabilities across MySQL Server, Cluster, Enterprise Backup, Connectors (including Connector/ODBC), and Router. The Critical Patch Update includes 98 new security patches, with 29 vulnerabilities exploitable remotely without authentication and a maximum CVSS score of 9.8. Potential impacts include unauthorized data access or modification and denial of service.

Why it matters: Organizations running Oracle MySQL products should prioritize patching, particularly for remote unauthenticated vulnerabilities with high CVSS scores, to prevent data compromise and service disruption.

VendorsOracle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary