CVE Daily – Vitess (High+Critical) https://cvedaily.com/pages/tags/vitess.html CVE Daily – Vitess (High+Critical) en Wed, 03 Jun 2026 21:26:59 +0000 [High] CVE-2026-27969 – Vitess is a database clustering system for horizontal scaling of MySQL. Prior to... https://nvd.nist.gov/vuln/detail/CVE-2026-27969 https://nvd.nist.gov/vuln/detail/CVE-2026-27969 Thu, 26 Feb 2026 02:16:24 +0000 High CVE-2026-27969

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that files in the manifest — which may be files that they have also added to the manifest and backup contents — are written to any accessible location on restore. This i…

CVSS: 8.8 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2026-27965 – Vitess is a database clustering system for horizontal scaling of MySQL. Prior to... https://nvd.nist.gov/vuln/detail/CVE-2026-27965 https://nvd.nist.gov/vuln/detail/CVE-2026-27965 Thu, 26 Feb 2026 02:16:23 +0000 Critical CVE-2026-27965

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that arbitrary code is later executed when that backup is restored. This can be used to provide that attacker with unintended/unauthorized access to the production deplo…

CVSS: 9.9 · CWE: CWE-78

View on NVD

]]>