Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4508 articles · 179422 vulns · 37/41 feeds (7d)
← Back to list
6.5
CVE-2026-47064PATCHED
oracle · mysql server

CVE-2026-47064: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). The vulnerability affects unknown processing and results in resource consumption, allowing remote exploitation by low privileged attackers with network access. Successful exploitation can cause denial of service through resource exhaustion or server crashes.

Affected Products

VendorProductVersions
oraclemysql server8.4.0-8.4.10, 9.7.0-9.7.1, 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
oraclemysqlcert_advisory90%

References

  • https://www.oracle.com/security-alerts/cpujul2026.html(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories5h ago
[NEU] [hoch] Oracle MySQL: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB16h ago
CVE-2026-47064 | Oracle MySQL Cluster/MySQL Server Server Optimizer resource consumption
→ No new info (linked only)
CVSS 3.16.5 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.oracle.com/security-alerts/cpujul2026.html
PublishedJul 21, 2026
Last enriched15h agov2
Trending Score41
Source articles2
Independent2
Info Completeness8/14
Missing: epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-35273EXPKEV
CVE-2026-35273: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana
Trending: 171
CRITICALCVE-2026-46817EXPKEV
CVE-2026-46817: Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi
Trending: 71
CRITICALCVE-2026-62549
CVE-2026-62549: Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions th
Trending: 46
CRITICALCVE-2026-60880
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil
Trending: 46
HIGHCVE-2026-46863
CVE-2026-46863: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supp
Trending: 43

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 21, 2026
Patch Available
Jul 21, 2026
Discovered by ZDM
Jul 21, 2026
Updated: severity, description
Jul 21, 2026

Version History

v2
Last enriched 15h ago
v2Tier C15h ago

Severity corrected from MEDIUM to CRITICAL based on new vulnerability classification; description updated to clarify resource consumption impact.

severitydescription
via VulDB
v116h ago

Initial creation