{"schemaVersion":3,"id":"USN-8457-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"mysql-8.0, mysql-8.4 vulnerabilities\n\nIt was discovered that MySQL Router incorrectly handled repeated TLS\nprotocol upgrade requests. An unauthenticated remote attacker could\npossibly use this issue to cause MySQL Router to crash, resulting in a\ndenial of service. (CVE-2026-46862)\n\nIt was discovered that MySQL Server incorrectly handled connection\nauthentication. An unauthenticated remote attacker could possibly use this\nissue to cause MySQL to crash, resulting in a denial of service.\n(CVE-2026-46863)","dates":{"published":"2026-06-22T13:11:43.000Z","modified":"2026-06-22T20:19:14.923Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"mysql-8.0","name":"mysql-8.0","label":"mysql-8.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-8.0","purlType":"deb","versions":[{"text":"< 8.0.46-0ubuntu0.22.04.3","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.46-0ubuntu0.24.04.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.46-0ubuntu0.22.04.3 | < 8.0.46-0ubuntu0.24.04.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"mysql-8.4","name":"mysql-8.4","label":"mysql-8.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-8.4","purlType":"deb","versions":[{"text":"< 8.4.10-0ubuntu0.25.10.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.4.10-0ubuntu0.26.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.4.10-0ubuntu0.25.10.1 | < 8.4.10-0ubuntu0.26.04.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8457-1","label":"ubuntu.com/security/notices/USN-8457-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46862","label":"ubuntu.com/security/CVE-2026-46862","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-46863","label":"ubuntu.com/security/CVE-2026-46863","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-46862","CVE-2026-46863"],"downstream":[],"duplicates":[],"related":["CVE-2026-46862","CVE-2026-46863"]},"timeline":[{"kind":"published","date":"2026-06-22T13:11:43.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-22T20:19:14.923Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:37:59.167Z","stale":false,"partial":false}}