CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-101780
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: X Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101779
Low

Vulnerability in the MySQL Server and MySQL Cluster product (component: Server: Telemetry) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a partial denial of service of MySQL Server and MySQL Cluster.

CVE-2026-101778
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Components Services) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a low-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101777
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Security: Encryption) affects MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS) and unauthorized read access to a subset of data.

CVE-2026-101776
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Group Replication Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. An easily exploitable network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101775
High

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to modify critical data and cause a hang or repeatable crash (DoS).

CVE-2026-101774
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Pluggable Auth) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack by an unauthenticated user can cause a hang or frequently repeatable crash (complete DoS) and unauthorized update, insert or delete access to some data.

CVE-2026-101773
High

Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. An easily exploitable flaw allows an unauthenticated attacker with access to the communication segment to cause a hang or repeatable crash (DoS) and modify some data.

CVE-2026-101772
High

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

CVE-2026-101771
High

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

CVE-2026-101770
High

Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.

CVE-2026-101769
High

Vulnerability in MySQL Cluster (component Cluster: General) affecting versions 26.7.0-26.7.1. A difficult-to-exploit network attack via TCP allows an unauthenticated attacker to cause a hang or repeatable crash (complete DoS) and unauthorized read and modification of some data.

CVE-2026-101768
High

Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.

CVE-2026-101767
Critical

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core) affecting versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it to take over Oracle Application Object Library.

CVE-2026-101766
Medium

Vulnerability in MySQL Server and MySQL Cluster (component Server: Replication) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101765
Critical

Vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.

CVE-2026-101764
Medium

Vulnerability in Oracle Communications Billing and Revenue Management (BRM Server component) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. Easily exploitable by a low-privileged attacker with logon to the infrastructure, allowing unauthorized access to critical data or complete access to all accessible data.

CVE-2026-101763
Critical

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product (component: Cloud native deployment) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. An unauthenticated attacker with network access via RMI can easily exploit it to take over Elastic Charging Engine.

CVE-2026-101762
Medium

Vulnerability in MySQL Server and MySQL Cluster (Server: Security: Encryption component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a low-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).

CVE-2026-101761
Medium

Vulnerability in MySQL Server and MySQL Cluster (Server: Security: Encryption component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows an unauthenticated network attacker to cause a hang or frequently repeatable crash (complete DoS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS