CVE-2026-47052 Oracle Corporation CVE debrief

Who should care

Administrators and users of MySQL Server and MySQL Cluster products, especially those using affected versions, should be aware of this vulnerability and take necessary actions to mitigate the risk. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and planning vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Technical summary

The vulnerability is located in the InnoDB component of MySQL Server and MySQL Cluster products of Oracle MySQL. It allows high privileged attackers with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially causing a hang or frequently repeatable crash. The vulnerability affects versions 8.4.0-8.4.10, 9.7.0-9.7.1, 8.0.0-8.0.47, and 8.4.0-8.4.10. It has a CVSS 3.1 Base Score of 4.9, indicating a medium severity level. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, as it can be exploited by high privileged attackers with network access.

Recommended defensive actions

• Apply patches or updates provided by Oracle to fix the vulnerability.
• Restrict network access to MySQL Server and MySQL Cluster to only necessary personnel.
• Monitor MySQL Server and MySQL Cluster for suspicious activity.
• Consider implementing additional security measures, such as firewalls or intrusion detection systems.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-21T22:17:10.903Z and was last modified on 2026-07-27T14:52:30.413Z. The NVD entry is currently Analyzed. This vulnerability affects MySQL Server and MySQL Cluster products of Oracle MySQL, specifically versions 8.4.0-8.4.10, 9.7.0-9.7.1, 8.0.0-8.0.47, and 8.4.0-8.4.10. The vulnerability is located in the InnoDB component and has a CVSS 3.1 Base Score of 4.9, indicating a medium severity level. Defenders should verify the affected scope and review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Official resources