Group Replication Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101799

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101799?

A vulnerability in the MySQL Server and MySQL Cluster from Oracle affects multiple versions, specifically related to the Group Replication GCS component. This flaw can be easily exploited by an unauthenticated attacker with access to the physical network segment where the MySQL instances run, leading to potential denial of service. Attackers may invoke conditions that cause MySQL to hang or repeatedly crash, disrupting its availability and overall performance.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.