Denial of Service Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101789

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101789?

Oracle's MySQL Server and MySQL Cluster contain a vulnerability in the Optimizer component, allowing attackers with low privileges and network access to exploit the system using various protocols. This vulnerability can lead to unauthorized access, resulting in either a frequent hang or a total crash (Denial of Service) of the MySQL services. Users of affected versions should prioritize updating to prevent potential disruptions.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.