Critical MySQL Denial of Service Vulnerabilities in Ubuntu 20.04 LTS

Linuxsecurity

Critical MySQL Denial of Service Vulnerabilities in Ubuntu 20.04 LTS

First seen 24 Jun 2026, 13:53 UTC • •72.0

Article Content

1 / 3

Browse articles

ThreatCluster •June 25, 2026 at 13:41 UTC

•Two critical DoS vulnerabilities in MySQL (CVE-2026-46862, CVE-2026-46863) were disclosed.
•Unauthenticated remote attackers can exploit these vulnerabilities to crash MySQL Router and Server.
•Users of Ubuntu 20.04 LTS with MySQL 8.0 are urged to apply the latest security updates immediately.

Two critical denial of service vulnerabilities were discovered in MySQL affecting Ubuntu 20.04 LTS. The vulnerabilities, identified as CVE-2026-46862 and CVE-2026-46863, allow unauthenticated remote attackers to crash MySQL Router and MySQL Server, respectively. The issues stem from improper handling of TLS protocol upgrade requests and connection authentication. Users of MySQL version 8.0 on Ubuntu 20.04 LTS are particularly at risk. The vulnerabilities were published on June 16, 2026, and have been addressed in the latest security update. Administrators are advised to update their systems to mitigate the risks. The update is available through standard system updates for Ubuntu Pro users. The potential impact includes service disruption for applications relying on MySQL.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 98d ago How this analysis works

Timeline

2026-06-16

CVE-2026-46862 published

MySQL Router vulnerability allows unauthenticated attackers to cause a denial of service.

2026-06-16

CVE-2026-46863 published

MySQL Server vulnerability allows unauthenticated attackers to cause a denial of service.

2026-06-22

Security update USN-8457-1 released

Ubuntu released an update addressing the critical MySQL vulnerabilities for multiple versions.

2026-06-24

Further update USN-8457-2 released

An additional update was provided for MySQL on Ubuntu 20.04 LTS to fix the vulnerabilities.

More articles in this cluster (2)

Threat Graph

8 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Denial of Service
T1499 - Endpoint Denial of Service

Organization (1)

Ubuntu

Vulnerability (2)

CVE-2026-46862
CVE-2026-46863

Weakness (1)

CWE-400 - Uncontrolled Resource Consumption

Affected Platform (2)

MySQL
MySQL Router

Relationships

CVE-2026-46862 targets MySQL
CVE-2026-46862 targets MySQL Router
CVE-2026-46863 targets MySQL
CVE-2026-46863 targets MySQL Router
Denial of Service targets MySQL
Denial of Service targets MySQL Router
T1499 - Endpoint Denial of Service targets MySQL
T1499 - Endpoint Denial of Service targets MySQL Router
CVE-2026-46862 related to Ubuntu
CVE-2026-46862 related to CWE-400 - Uncontrolled Resource Consumption

Following this threat?

Track Ubuntu and CVE-2026-46862 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…