MySQL Server and Cluster Security Vulnerability in Oracle MySQL
CVE-2026-101800

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101800?

A vulnerability exists in Oracle's MySQL Server and MySQL Cluster that permits a low-privileged attacker with network access through various protocols to exploit the system. This vulnerability may result in unauthorized operations including the creation, deletion, or modification of critical data accessible through the MySQL Server and MySQL Cluster. Successful exploitation could lead to a breach of confidentiality and integrity of the data stored within, raising significant risks for organizations utilizing these database systems.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.