Authentication Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101774

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101774?

An authentication bypass vulnerability exists in the MySQL Server and MySQL Cluster products of Oracle MySQL. This flaw permits an unauthenticated attacker, possessing network access through multiple protocols, to exploit MySQL Server and MySQL Cluster instances. The successful exploitation of this vulnerability can lead to unauthorized interruptions, including the potential for a denial of service (DoS), by causing repeated server hangs or crashes. Additionally, attackers may gain unauthorized access to update, insert, or delete data within the affected MySQL environments.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.