Oracle MySQL Shell vulnerabilities

6 CVEs affecting Oracle MySQL Shell, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-46871, published 2026-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-46850, published 2026-06-17. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low…
CVE-2022-21535, published 2022-07-19. Low severity, CVSS 2.5. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows…
CVE-2026-46871, published 2026-06-17. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low…
CVE-2026-46870, published 2026-06-17. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Difficult to exploit vulnerability allows low…
CVE-2022-21555, published 2022-07-19. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL (component: Shell: GUI). Supported versions that are affected are 1.1.8 and prior. Easily exploitable vulnerability allows high…
CVE-2026-46869, published 2026-06-17. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Dump and Load). Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability…