Do Son Oracle fixed 98 MySQL vulnerabilities in October 2026, including CVSS 9.8 bugs CVE-2025-15467 in OpenSSL and CVE-2026-9547 in curl.
mysql
Vendure Core faces a critical 9.1 SQL Injection via the Shop API. Unauthenticated attackers can hijack databases—upgrade to 3.6.2, 3.5.7, or 2.3.4 now!
MantisBT patches a critical 9.3 CVSS auth bypass (CVE-2026-30849) and high-severity XSS flaws. Learn how MySQL type conversion opens the door. Update now!
Threat actors are actively compromising poorly managed MySQL servers, using UDFs to inject Gh0stRAT, XWorm, HpLoader, and legitimate Zoho agents for full system control and data theft.
Learn about CVE-2025-26701, a critical security vulnerability in PMM that allows unauthorized root access to database environments.
A flaw (CVE-2024-27295) was found in Directus, a versatile open-source content management platform favored by developers
Identified as CVE-2023-49954, this security loophole is an SQL Injection flaw found in 3CX CRM Integration.
AhnLab has discovered attacks on vulnerable MySQL servers using the Ddostf bot for DDoS assaults. First identified in 2016
The mysqldump client utility performs logical backups, producing a set of SQL statements that can be executed...