CVE-2026-101761
Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in Oracle MySQL Server

Publication date: 2026-10-20

Last updated on: 2026-10-30

Assigner: Oracle

Description
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-30
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-08
NVD
CVE-2026-101761
EUVD
EUVD-2026-106162

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
oracle mysql_cluster From 26.7.0 (inc) to 26.7.1 (inc)
oracle mysql_cluster From 8.0.0 (inc) to 8.0.49 (inc)
oracle mysql_cluster From 8.4.0 (inc) to 8.4.12 (inc)
oracle mysql_cluster From 9.7.0 (inc) to 9.7.3 (inc)
oracle mysql_server From 26.7.0 (inc) to 26.7.1 (inc)
oracle mysql_server From 8.4.0 (inc) to 8.4.12 (inc)
oracle mysql_server From 9.7.0 (inc) to 9.7.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a denial-of-service (DoS) vulnerability in Oracle MySQL Server and MySQL Cluster. It allows an unauthenticated attacker over a network to crash or hang the database server repeatedly by exploiting weaknesses in the encryption component.

Detection Guidance

This vulnerability affects specific versions of MySQL Server and MySQL Cluster. To detect it, check your MySQL version using commands like 'mysql --version' or 'mysqld --version'. Compare the output against the affected versions listed in the CVE description (8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 for MySQL Server and 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 for MySQL Cluster).

Impact Analysis

If exploited, this vulnerability can cause frequent crashes or hangs in your MySQL Server or Cluster, leading to downtime and loss of availability for your database services.

Compliance Impact

This vulnerability causes denial-of-service conditions in MySQL Server and Cluster, leading to system unavailability. Such disruptions may violate compliance requirements for data availability under GDPR and HIPAA, which mandate timely access to personal or health data.

Mitigation Strategies

Upgrade MySQL Server and MySQL Cluster to versions beyond the affected ranges (8.4.12+, 9.7.3+, 26.7.1+ for Server; 8.0.49+, 8.4.12+, 9.7.3+, 26.7.1+ for Cluster) to resolve the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101761. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...