Unauthenticated Access Vulnerability in MySQL Router by Oracle

CVE-2026-101631

What is CVE-2026-101631?

A vulnerability exists in MySQL Router, a product of Oracle MySQL, that allows an unauthenticated attacker with network access via HTTPS to compromise the router. While the exploitation of this flaw requires human interaction from a third party, it can lead to unauthorized creation, deletion, or modification of critical data accessible through MySQL Router. Attackers could gain unauthorized access to sensitive data, posing significant risks to data integrity and confidentiality.

References