MySQL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
384 matching records
- Critical9.9MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.97%Oct 16, 2026
- Medium4.3MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.53%Oct 16, 2026
- High7.7MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.86%Oct 16, 2026
- Critical9.9MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.45%Oct 16, 2026
- High8.8MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.28%Oct 16, 2026
- Medium5.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.45%Oct 16, 2026
- Critical9.8Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 1.17%Oct 13, 2026
- High7.2MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.79%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.52%Oct 9, 2026
- High8.0MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.20%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.40%Oct 9, 2026
- Medium4.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.15%Oct 9, 2026
- Medium6.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.34%Oct 9, 2026
- High8.5MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.38%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.49%Oct 9, 2026
- Medium5.9MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSCheck if you run itEPSS 0.24%Oct 8, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.Check if you run itEPSS 0.28%Sep 25, 2026
- UnknownCVE-2026-85788 - Issue with awslabs mysql-mcp-serverCheck if you run itEPSS 0.18%Sep 9, 2026
- Medium6.8Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Check if you run itEPSS 0.17%Aug 18, 2026
- Medium6.5Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Check if you run itEPSS 0.37%Aug 18, 2026
- Medium5.5Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).Check if you run itEPSS 0.16%Aug 18, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.Check if you run itEPSS 0.39%Jul 30, 2026
- Medium6.6Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Check if you run itEPSS 0.36%Jul 21, 2026
- Critical9.2Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php.Check if you run itEPSS 0.30%May 21, 2026
- Critical9.2Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are committed to the source repository.Check if you run itEPSS 0.30%May 21, 2026