Vulnerability in MySQL Server and Cluster by Oracle
CVE-2026-101797

7.5HIGH

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101797?

A vulnerability exists in the MySQL Server and MySQL Cluster components of Oracle MySQL, specifically affecting the client functionality associated with mysqldump. This vulnerability can be exploited by remote, unauthenticated attackers who have network access and can lead to severe consequences, including unauthorized takeovers of MySQL servers and clusters. Successful exploitation necessitates human interaction from a user other than the attacker, making it critical for security teams to address this issue promptly to protect sensitive data and maintain system integrity.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.