MySQL Server and Cluster Vulnerability in Oracle MySQL
CVE-2026-101775

7.4HIGH

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101775?

A security vulnerability exists in Oracle MySQL's Server and Cluster components, where unauthenticated attackers with network access can exploit this weak point through multiple protocols. This may lead to unauthorized creation, deletion, or modification of critical data within the MySQL environment. Additionally, successful exploitation of this vulnerability can allow attackers to induce significant disruption, causing MySQL Server and Cluster to crash or hang repeatedly, impacting overall service availability. Affected versions span across various releases of MySQL Server and MySQL Cluster.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.