Live › vulnerability › CVE-2026-101513
Go to dashboardA flaw in the InnoDB storage component of MySQL Cluster versions 8.0.0 through 8.0.37 can be used to cause a hang or repeatable crash. The attacker needs physical access and high privileges, and the impact is denial of service only.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Cluster 8.0.0 through 8.0.37 on hardware an attacker could physically reach. The sources describe a hard-to-exploit local availability issue, so remote-only deployments face lower practical risk but should still patch on normal schedule.
No product ranges from the sources yet.
mysql -V or SELECT VERSION(); and compare against the affected range 8.0.0 to 8.0.378.0.37 per Oracle's Critical Patch Update for the relevant quarterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit vulnerability allows physical access to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster. CVSS 3.1 Base Score 3.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101513")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.