Live › vulnerability › CVE-2026-101720
Go to dashboardA flaw in MySQL Server and MySQL Cluster connection handling, affecting versions 26.7.0 through 26.7.1, lets an unauthenticated attacker with network access modify data. Successful attacks allow unauthorized update, insert or delete access to some accessible data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Server or MySQL Cluster in the affected version range 26.7.0 to 26.7.1 that accept connections over the network. The sources say the attack needs no login and no user action, but the impact is limited to integrity of some accessible data, not confidentiality or availability. Systems where the database port is only reachable from localhost or a private application tier have reduced exposure.
No product ranges from the sources yet.
mysqld --version on each database host and compare against the affected range 26.7.0 to 26.7.126.7.1 once Oracle publishes the fixed version (unknown in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101720")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.