CVE-2026-101720

Received Received - Intake

Authentication Bypass in MySQL Server

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Oracle

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-20

Generated

2026-10-21

AI Q&A

2026-10-21

EPSS Evaluated

N/A

NVD

CVE-2026-101720

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle	Corporation	MySQL Server 26.7.0-26.7.1
Oracle	Corporation	MySQL Cluster 26.7.0-26.7.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in MySQL Server and MySQL Cluster versions 26.7.0 to 26.7.1. It allows an unauthenticated attacker with network access to potentially modify data in the database without proper authorization.

Impact Analysis

An attacker could exploit this to insert, update, or delete data in your MySQL database, potentially leading to data corruption, loss, or unauthorized changes. This could affect data integrity and reliability.

Compliance Impact

This vulnerability could lead to unauthorized data modifications, violating integrity requirements in GDPR and HIPAA. Non-compliance risks include legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Upgrade MySQL Server and MySQL Cluster to versions beyond 26.7.1 to address the vulnerability. Apply the latest patches from Oracle as soon as possible.

Hi! I’m here to help you understand CVE-2026-101720. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70