CVE-2026-34319

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

• CWE-204

• https://www.oracle.com/security-alerts/cpuapr2026.htmlVendor Advisory

Published

Apr 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34313Vulnerability in the Oracle Financial Services Analytical Ap…6.5
• CVE-2026-34314Vulnerability in the Oracle Financial Services Analytical Ap…6.8
• CVE-2026-34315Vulnerability in the Oracle WebLogic Server product of Oracl…6.5
• CVE-2026-34316Vulnerability in the Oracle Commerce Service Center product …6.1
• CVE-2026-34317Vulnerability in the MySQL Shell product of Oracle MySQL (co…5
• CVE-2026-34318Vulnerability in the MySQL Shell product of Oracle MySQL (co…5.8
• CVE-2026-3432On SimStudio version below to 0.5.74, the `/api/auth/oauth/t…9.1
• CVE-2026-34320Vulnerability in the Oracle Financial Services Customer Scre…7.5
• CVE-2026-34321Vulnerability in the Oracle Financial Services Analytical Ap…4.8
• CVE-2026-34323Vulnerability in the Oracle Life Sciences InForm product of …6.3
• CVE-2026-34324Vulnerability in the Oracle Life Sciences InForm product of …6.5
• CVE-2026-34325Vulnerability in the Oracle Financial Services Analytical Ap…6.8