CVE-2026-101722

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in MySQL Server

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: Oracle

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101722

EUVD

EUVD-2026-106123

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	MySQL Server	9.7.0-9.7.3
Oracle Corporation	MySQL Server	26.7.0-26.7.1
Oracle Corporation	MySQL Cluster	9.7.0-9.7.3
Oracle Corporation	MySQL Cluster	26.7.0-26.7.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in MySQL Server and MySQL Cluster where a low-privileged attacker with network access can exploit it to gain unauthorized read access to some data in the affected systems.

Detection Guidance

This vulnerability can be detected by checking the installed version of MySQL Server or MySQL Cluster. If your version falls within the affected ranges (MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3, 26.7.0-26.7.1), the system is potentially vulnerable.

Impact Analysis

If you use MySQL Server versions 9.7.0-9.7.3 or 26.7.0-26.7.1, or MySQL Cluster versions 9.7.0-9.7.3 or 26.7.0-26.7.1, an attacker could access some of your stored data without proper authorization.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate compliance requirements like GDPR or HIPAA if sensitive data is exposed. Organizations must address it to maintain regulatory compliance.

Mitigation Strategies

Upgrade MySQL Server to versions 9.7.4 or later and MySQL Cluster to versions 9.7.4 or later. Apply the latest patches from Oracle to address the vulnerability in the Connection Handling component.

Hi! I’m here to help you understand CVE-2026-101722. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...