CVE-2026-101749

MediumCVSS 4.9

Published: 20/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

39th percentile - higher than 39% of all known CVEs

Summary

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Security: Encryption) affects MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. A high-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (availability impact).

Risk Assessment

A high-privileged attacker can remotely cause database unavailability, potentially disrupting applications that depend on MySQL. The risk mainly affects environments where high-privilege accounts are reachable over the network.

Recommendation

Update MySQL Server and MySQL Cluster to a version containing the fix (outside the listed ranges) and restrict network access to high-privilege accounts.

Other vulnerabilities in MySQL Server / MySQL Cluster

See all

Original NVD description (English source)

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS