MySQL Server vulnerabilities

122 known CVE vulnerabilities in MySQL Server, translated and rated.

CVE-2026-101637Medium
Vulnerability in MySQL Server and MySQL Cluster (component InnoDB) versions 9.7.0-9.7.3 and 26.7.0-26.7.1. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) and unauthorized modification of some data.
CVE-2026-101629Medium
A vulnerability in Oracle MySQL (InnoDB component) affects MySQL Server 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster in the same versions. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS) of the server or cluster.
CVE-2026-101627Medium
A vulnerability in Oracle MySQL (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS), although exploitation is difficult.
CVE-2026-101624Medium
A vulnerability in Oracle MySQL (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101623Medium
A vulnerability in Oracle MySQL (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101622Medium
A vulnerability in Oracle MySQL (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101621Medium
A vulnerability in Oracle MySQL (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101620Medium
A vulnerability in Oracle MySQL (Server: Optimizer component) affects MySQL Server 9.7.0-9.7.3 and MySQL Cluster 9.7.0-9.7.3. A low-privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101619Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101618Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101617Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101616Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: JSON component) allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101615Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with logon to the infrastructure to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101614Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101613Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: DDL component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101612Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with logon to the infrastructure to cause a hang or frequently repeatable crash (complete DoS) of the server, requiring user interaction. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101611Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server, though the attack is difficult to exploit. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101610Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of the server. Affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
CVE-2026-101609Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit network attack requiring high privileges can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101608Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101607Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer component) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2017-3309High
Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise the MySQL Server. Attacks may lead to hanging or frequently repeatable crashes of the server, resulting in a complete denial of service (DoS).
CVE-2017-3308High
Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise MySQL Server. Attacks may lead to hangs or frequent crashes of the server, resulting in complete denial of service.
CVE-2026-21968Medium
A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affected versions are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. An easily exploitable vulnerability allows a low privileged attacker with network access via multiple protocols to compromise MySQL.
CVE-2026-101803Medium
Vulnerability in the MySQL Server, MySQL Cluster product (component: Server: XML), affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and to cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101802Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Parser) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101801Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101800Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Security: Privileges) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Difficult to exploit, it allows a low-privileged attacker with network access to create, delete or modify critical data and gain full access to all accessible data.
CVE-2026-101799Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by an unauthenticated attacker with access to the physical communication segment, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101798Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101797High
Vulnerability in MySQL Server and MySQL Cluster (component: Client: mysqldump) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
CVE-2026-101796High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) of Oracle MySQL, affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A difficult-to-exploit flaw requiring human interaction allows an unauthenticated attacker with network access to take over MySQL Server or MySQL Cluster.
CVE-2026-101795Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a high-privileged attacker with logon to the infrastructure, allowing takeover of the database server.
CVE-2026-101794Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: XML) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101789Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. Easily exploitable by a low-privileged attacker with network access, allowing a hang or frequently repeatable crash (complete DoS) of the server.
CVE-2026-101788Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101787Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101786High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) affecting versions 26.7.0-26.7.1. An easily exploitable flaw allows a high-privileged attacker with network access to take over the MySQL server.
CVE-2026-101785High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows a low-privileged attacker to modify critical data, read a subset of it and cause a hang or repeatable crash (DoS).
CVE-2026-101784Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Optimizer) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101781High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication GCS) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment to take over the MySQL server.
CVE-2026-101780Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: X Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101779Low
Vulnerability in the MySQL Server and MySQL Cluster product (component: Server: Telemetry) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a partial denial of service of MySQL Server and MySQL Cluster.
CVE-2026-101778Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101777Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Security: Encryption) affects MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS) and unauthorized read access to a subset of data.
CVE-2026-101776Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Group Replication Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
CVE-2026-101775High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to modify critical data and cause a hang or repeatable crash (DoS).
CVE-2026-101774Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Pluggable Auth) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack by an unauthenticated user can cause a hang or frequently repeatable crash (complete DoS) and unauthorized update, insert or delete access to some data.
CVE-2026-101773High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the communication segment to cause a hang or repeatable crash (DoS) and modify some data.
CVE-2026-101772High
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS