Aurora MySQL 8.4.8, available in early September 2026, adds delayed replication: a replica deliberately applies each change with a configurable lag, making it the only copy that does not reproduce an accidental DROP TABLE or DELETE. Configure it by stored procedure and write the recovery runbook before you need it.

Present since PostgreSQL 9.4 in 2014, CVE-2026-6471 (CVSS 7.2) lets an account holding the REPLICATION attribute load an arbitrary library through logical decoding and run code as the server’s operating-system user. Fixed on August 13, 2026 via the output_plugin_libraries parameter: update and make sure your output plugins are explicitly allowlisted.