Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-101802

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101802?

A vulnerability exists in the MySQL Server and MySQL Cluster components of Oracle MySQL, which can be exploited by attackers with low privileges and network access. This flaw can lead to a denial of service, allowing unauthorized users to cause frequent crashes or hangs in the MySQL Server and Cluster environments. The affected versions include MySQL Server 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. It is crucial for users to update to the latest versions to mitigate potential risks.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.49

MySQL Cluster 8.4.0-8.4.12

MySQL Cluster 9.7.0-9.7.3

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.