Critical [CVE-2025-14017 +20] April 2026 MySQL Server 8.0.0, 8.4.0 and 9.0.0 Vulnerabilities in NetApp Products

Multiple NetApp products incorporate MySQL.

MySQL versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.0 through 9.6.0 are susceptible to a vulnerability that could allow unauthenticated attacker with logon to the infrastructure, unauthorized creation, deletion or modification access to critical data or complete access to all MySQL Server accessible data, unauthenticated attacker or low or high privileged attacker with network access via multiple protocols to compromise MySQL Server.

Refer to “Oracle Critical Patch Update Advisory - April 2026” for additional details. MySQL versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.0 through 9.6.0 are susceptible to a vulnerability that could allow an attacker to create, delete, or modify critical data, or potentially gain full access to all data accessible by the MySQL Server.

Successful attacks of this vulnerability can result in takeover, unauthorized read access to a subset of MySQL Server accessible data, and cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Active IQ Unified Manager for Microsoft Windows:

Not affected by CVE-2026-34276 or CVE-2026-34271.

Active IQ Unified Manager for VMware vSphere:

SnapCenter:

Not affected by CVE-2025-15467. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.