Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-34318

Опубликовано: 21 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.8

Описание

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).

РелизСтатусПримечание
devel

not-affected

esm-apps/noble

not-affected

jammy

DNE

noble

not-affected

questing

not-affected

resolute

not-affected

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

not-affected

esm-apps/xenial

not-affected

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

not-affected

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

no more upstream support
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

not-affected

jammy

not-affected

noble

DNE

questing

DNE

resolute

DNE

upstream

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

ignored

see notes
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

ignored

see notes
esm-infra/bionic

ignored

see notes
esm-infra/xenial

ignored

end of ESM support, was ignored [see notes]
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

released

8.0.46-0ubuntu0.20.04.1+esm2
jammy

released

8.0.46-0ubuntu0.22.04.2
noble

released

8.0.46-0ubuntu0.24.04.2
questing

DNE

resolute

DNE

upstream

released

8.0.46

Показывать по

РелизСтатусПримечание
devel

pending

8.4.10-0ubuntu2
jammy

DNE

noble

DNE

questing

released

8.4.9-0ubuntu0.25.10.1
resolute

released

8.4.9-0ubuntu0.26.04.1
upstream

released

8.4.9

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 18%
0.00263
Низкий

5.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.8
nvd
4 месяца назад

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).

msrc
3 месяца назад

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVSS3: 5.8
debian
4 месяца назад

Vulnerability in the MySQL Shell product of Oracle MySQL (component: S ...

CVSS3: 5.8
github
4 месяца назад

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).

EPSS

Процентиль: 18%
0.00263
Низкий

5.8 Medium

CVSS3