Live › vulnerability › CVE-2026-101632
Go to dashboardA flaw in the General component of MySQL Router 26.7.0 lets an unauthenticated attacker reach the router over HTTPS and read a subset of the data it can access. Exploitation needs a person other than the attacker to take an action.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Router 26.7.0 that expose its HTTPS interface to a network the attacker can reach. The sources do not say which deployments are exposed by default, so the reach beyond the stated network access is unknown.
No product ranges from the sources yet.
mysqlrouter --version and compare against 26.7.026.7.0 using the fixed release from Oracle's advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Router accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101632")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.