Live › vulnerability › CVE-2026-101679
Go to dashboardA flaw in the MySQL client programs component of MySQL Server and MySQL Cluster lets an unauthenticated attacker over the network hang or repeatedly crash the server. The impact is availability only, with no data read or code run according to the CVSS vector.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run MySQL Server or MySQL Cluster in the affected version ranges and expose the listening protocols to a network that attackers can reach. Systems where the database is only reachable on a locked-down internal network carry less risk. Deployments on releases outside the listed ranges are not affected.
No product ranges from the sources yet.
mysql --version on the database host to see the installed release.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101679")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.