cbcvebase.
CVE-2026-46850
published 2026-06-17

CVE-2026-46850: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily…

PriorityP262critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.52%
40.3th percentile
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Shell. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Affected

2 ranges
VendorProductVersion rangeFixed in
oraclemysql_shell——
oracle_corporationmysql_shell——

Detection & IOCsextracted from sources · hover to see the quote

  • →CVE-2026-46850 affects MySQL Shell for VS Code version 2026.2.0+9.6.1; detection should target this specific component and version for patch compliance checks. ↗
  • →The attack vector is network-accessible HTTP with low privilege required and no user interaction; monitor for anomalous low-privileged HTTP requests targeting MySQL Shell for VS Code endpoints. ↗
  • →Scope change is indicated, meaning successful exploitation can pivot to impact additional products beyond MySQL Shell itself; broaden monitoring to adjacent systems when MySQL Shell for VS Code is exposed. ↗
  • →Successful exploitation results in full takeover (C/I/A all High); treat any unexpected process spawning or configuration changes from the MySQL Shell for VS Code process as high-priority alerts. ↗
  • ·Only version 2026.2.0+9.6.1 of MySQL Shell for VS Code is listed as affected; other versions are not confirmed vulnerable per the advisory. ↗
  • ·The vulnerability is specifically in the 'Shell for VS Code' component of MySQL Shell, not the core MySQL Server product; ensure detection and patching scope is correctly scoped to this component. ↗

CVSS provenance

nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
cvelistv5v3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.