CVE-2026-101779

A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service DoS. Successful exploitation can lead to unauthorized degradation of database service...

CVE-2026-101801

A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete Denial of Service DoS, rendering the service unavailable to...

CVE-2026-101784

A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. Successful exploitation allows the attacker to hang or repeatedly crash the...

CVE-2026-101731

A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service DoS for the database service...

CVE-2026-101730

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS of affected MySQL Server and MySQ...

CVE-2026-101727

A flaw was found in MySQL within the Server Replication component. A remote attacker with high privileges and network access can exploit this vulnerability to trigger an unexpected hang or repeatable crash. This issue results in a complete Denial of Service DoS, rendering the database service...

CVE-2026-101721

A flaw was found in mysql. A remote attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. By targeting the server component services, the attacker can cause the database to hang or crash repeatedly, disrupting availability for legitimate...

CVE-2026-101617

A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the database server to hang or repeatedly crash. This issue leads to a complete Denial of Service DoS, rendering the database service...

CVE-2026-101615

A flaw was found in the InnoDB component of MySQL. A local attacker with high privileges on the host infrastructure can exploit this vulnerability to cause the database service to hang or repeatedly crash, resulting in a denial of service DoS...

CVE-2026-101614

A flaw was found in the InnoDB component of MySQL. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS, rendering the database service unavailable t...

CVE-2026-101613

A flaw was found in the Data Definition Language DDL component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. This flaw primarily results in a complete denial of...

CVE-2026-101749

A flaw was found in MySQL. A remote attacker with high privileges and network access can exploit this vulnerability in the security encryption component to cause a Denial of Service DoS. Successful exploitation can lead to a complete hang or repeatable crash of the server, rendering database...

CVE-2026-101629

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges can exploit this vulnerability over the network to cause the database server to hang or crash repeatedly. This issue results in a complete Denial of Service DoS of the affected database service. Mitigation...

CVE-2026-95717

A stored cross-site scripting XSS vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context o...

CVE-2026-95707

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-95705

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying...

CVE-2026-95706

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying...

CVE-2026-95717

The provided documents identify CVE-2026-95717 as an Authenticated Stored Cross-Site Scripting (XSS) vulnerability located within the AOS Web-Based Management Interface . While the title specifies the vulnerability type and the affected component, the provided documentation does not include speci...

CVE-2026-95714 Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-95707 Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...