Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101777

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101777?

The vulnerability present in MySQL Server and MySQL Cluster products from Oracle allows an attacker with high privileges and network access to exploit it through various protocols. This can lead to a complete Denial of Service (DoS) of the affected MySQL products, resulting in service crashes, as well as unauthorized read access to sensitive data. It affects specific versions of MySQL Server and MySQL Cluster, posing serious risks to data confidentiality and availability.

Affected Version(s)

MySQL Cluster 9.7.0-9.7.3

MySQL Cluster 26.7.0-26.7.1

MySQL Server 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.