Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101773

7.1HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-101773?

This vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware running MySQL Server or MySQL Cluster to exploit the system. Successful exploitation can lead to unauthorized actions such as causing the server or cluster to hang or repeatedly crash, resulting in a complete Denial of Service. Additionally, attackers may gain illicit access to manipulate data by performing unauthorized insertions, deletions, or updates on accessible MySQL data.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.