CVE-2026-101726

A vulnerability exists in the C API component of MySQL Server and MySQL Cluster by Oracle MySQL. Affected versions include MySQL Server (8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). A low privileged attacker with network acc...

CVE-2026-101725

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: C API. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

CVE-2026-101722

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-101724

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

CVE-2026-101722

A vulnerability exists in the Server: Connection Handling component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster: 9.7.0-9.7.3, 26.7.0-26.7.1 . A low-privileged attacker with network access via mu...

CVE-2026-101724

A vulnerability exists in the InnoDB component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). A high-privileged attacker with network access ...

CVE-2026-101721

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

CVE-2026-101720

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2026-101721

Oracle MySQL MySQL Server and MySQL Cluster products are affected by a vulnerability in the Server: Components Services component. The flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash , resulting in a complete denia...

CVE-2026-101720

Oracle MySQL MySQL Server and MySQL Cluster versions 26.7.0-26.7.1 are vulnerable to an easily exploitable flaw in the Connection Handling component. An unauthenticated attacker with network access via multiple protocols can compromise the system, potentially gaining unauthorized update, insert, ...

CVE-2026-101679

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101678

The Oracle MySQL Connectors product is affected by a vulnerability in the Connector/J component, specifically in version 26.7.0 . This vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DOS) . Exploitation is c...

CVE-2026-101679

A vulnerability exists in the Client programs component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). An unauthenticated attacker with netwo...

CVE-2026-101677

A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...

CVE-2026-101637

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with networ...

CVE-2026-101637

A vulnerability exists in the InnoDB component of Oracle MySQL Server and MySQL Cluster products. Affected versions include MySQL Server 9.7.0-9.7.3 and 26.7.0-26.7.1 , as well as MySQL Cluster versions 9.7.0-9.7.3 and 26.7.0-26.7.1 . A high-privileged attacker with network access via multiple pr...

CVE-2026-101632

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation can lead to unauth...

CVE-2026-101631

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the service, though the attack is considered difficult to execute and requires human interaction from a third party. Successful ...

CVE-2026-101633

A vulnerability exists in the MySQL Router product of Oracle MySQL (component: Router: General ) in version 26.7.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the MySQL Router, potentially resulting in unauthorized read access to a subset of acces...

CVE-2026-101628

The Oracle MySQL Cluster product, specifically the Cluster: NDB Operator component in version 9.7.3 , is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) ...