---
id: "CVE-2026-101762"
kind: "vulnerability"
aliases: ["CVE-2026-101762"]
title: "MySQL Server and Cluster: encryption component flaw allows repeatable denial of service"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["database", "mysql", "package", "self-hosted"]
not_affected_if: ["managed-hosting", "version-outside-range"]
published_at: "2026-10-20T22:18:31+00:00"
first_seen_at: "2026-10-23T21:57:23+00:00"
updated_at: "2026-10-25T04:23:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101762", "first_seen_at": "2026-10-23T21:57:23+00:00"}]
---

# MySQL Server and Cluster: encryption component flaw allows repeatable denial of service

A flaw in the Encryption component of MySQL Server and MySQL Cluster lets a low-privileged attacker with network access hang or repeatedly crash the database. The attack is hard to carry out, and the impact is availability only, with no data read or changed according to the description.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `SELECT VERSION();` on the MySQL server and compare against the affected ranges: MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.

## Fix

- Upgrade MySQL Server and MySQL Cluster to the fixed release from Oracle's July 2026 Critical Patch Update advisory, which the sources do not name: unknown.

## Timeline

- 2026-10-23T21:57:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101762

## From the sources

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_