MySQL Router vulnerabilities

6 known vulnerabilities in MySQL Router from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MySQL Router: Improper Access Control

  CVE-2026-101810Oct 20, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

• 7.4 High severity

  MySQL Router: Improper Access Control

  CVE-2026-101783Oct 20, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Route

• 7.4 High severity

  MySQL Router: Improper Access Control

  CVE-2026-60725Jul 21, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to co

• 7.5 High severity

  MySQL Router: Uncontrolled Resource Consumption

  CVE-2026-60314Jul 21, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp

• 7.5 High severity

  MySQL Router: Uncontrolled Resource Consumption

  CVE-2026-46862Jun 17, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compro

• 9.8 Critical severity

  MySQL Router: Improper Access Control

  CVE-2026-46860Jun 17, 2026Oracle

  Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Rout