CVE-2026-11529

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read_resource of the file src/mysql_mcp_server/server.py of the component mysql URI Handler. This manipulation of the argument uri_str causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.3.0 is sufficient to resolve this issue. Patch name: 080bef9a96d625ce0dfbde573a08b93497871981. Upgrading the affected component is advised.

• CWE-74
• CWE-89

• https://github.com/designcomputer/mysql_mcp_server/commit/080bef9a96d625ce0dfbde573a08b93497871981
• https://github.com/designcomputer/mysql_mcp_server/issues/89
• https://github.com/designcomputer/mysql_mcp_server/pull/86
• https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.3.0
• https://vuldb.com/cve/CVE-2026-11529
• https://vuldb.com/submit/836490
• https://vuldb.com/vuln/369146
• https://vuldb.com/vuln/369146/cti

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11523A flaw has been found in Tenda W20E 15.11.0.6. This issue af…8.8
• CVE-2026-11524A vulnerability has been found in Tenda W20E 15.11.0.6. Impa…8.8
• CVE-2026-11525Impact: When undici parses a Set-Cookie header, it accepts a…3.7
• CVE-2026-11526GD versions before 2.86 for Perl allow OS command injection …9.8
• CVE-2026-11527Config::IniFiles versions before 3.001000 for Perl allow OS …8.6
• CVE-2026-11528A vulnerability was found in Tenda AC18 15.03.05.05. The aff…8.8
• CVE-2026-1153A vulnerability was detected in technical-laohu mpay up to 1…4.3
• CVE-2026-11530A vulnerability was identified in imvks786 student_managemen…7.3
• CVE-2026-11531A security flaw has been discovered in imvks786 student_mana…7.3
• CVE-2026-11532A weakness has been identified in imvks786 student_managemen…6.3
• CVE-2026-11533A security vulnerability has been detected in imvks786 stude…5.4
• CVE-2026-11534A vulnerability was detected in imvks786 student_management_…3.5