Known vulnerabilities in MySQL Shell

Known vulnerabilities in MySQL Shell

Vendor: Oracle

Software: MySQL Shell

Software CPE: cpe:2.3:a:oracle:mysql_shell:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU149690 - Improper input validation CVE-2026-46850	CWE-20	High	No	No	-	14.09.2026	SB2026091485
#VU149693 - Improper input validation CVE-2026-46870	CWE-20	High	No	No	-	14.09.2026	SB2026091485
#VU149696 - Improper input validation CVE-2026-46871	CWE-20	Medium	No	No	-	14.09.2026	SB2026091485
#VU149697 - Improper input validation CVE-2026-46869	CWE-20	Medium	No	No	8.4.10, 9.7.1	14.09.2026	SB2026091485
#VU126775 - Out-of-bounds read CVE-2026-34318	CWE-125	Medium	No	No	-	22.04.2026	SB20260422118 SB20260509136 SB2026060309 and 1 more
#VU126776 - Out-of-bounds read CVE-2026-34317	CWE-125	Low	No	No	-	22.04.2026	SB20260422118 SB2026050324 SB2026050325 and 5 more
#VU126777 - Out-of-bounds read CVE-2026-34319	CWE-125	Low	No	No	-	22.04.2026	SB20260422118 SB2026050324 SB2026050325 and 5 more
#VU68465 - Improper input validation CVE-2022-39402	CWE-20	Low	No	No	-	19.10.2022	SB2022101904
#VU68468 - Improper input validation CVE-2022-39403	CWE-20	Low	No	No	-	19.10.2022	SB2022101904
#VU67760 - Type conversion CVE-2020-10735	CWE-704	Medium	No	No	-	29.09.2022	SB2022092968 SB2022092970 SB2022093032 and 86 more
#VU65527 - Improper input validation CVE-2022-21535	CWE-20	Low	No	No	-	20.07.2022	SB2022072050 SB2022120117
#VU50990 - Integer overflow CVE-2020-36242	CWE-190	High	No	No	-	28.02.2021	SB2021022812 SB2021022813 SB2021052024 and 27 more