{"id":"CVE-2026-101769","kind":"vulnerability","aliases":["CVE-2026-101769"],"related":[],"title":"MySQL Cluster: unauthenticated network flaw allows crash and data changes","description":"Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).  Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster as well as  unauthorized update, insert or delete access to some of MySQL Cluster accessible data and  unauthorized read access to a subset of MySQL Cluster accessible data. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H).","summary":"MySQL Cluster versions 26.7.0 through 26.7.1 have a flaw in the General component that an unauthenticated attacker can reach over TCP. Successful exploitation can crash or hang the cluster and gives partial read, insert, update and delete access to some data.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","mysql","mysql-cluster","package","self-hosted"],"not_affected_if":["no-network-exposure","other-mysql-versions"],"how_to_check":"- Run `ndb_mgm --version` or `mysqld --version` on cluster nodes and compare against `26.7.0` and `26.7.1`\n- Check the installed MySQL Cluster package version with your OS package manager\n- unknown for any further configuration check, the sources do not say","fix":"- Upgrade MySQL Cluster to a release later than `26.7.1` once Oracle publishes one; the sources do not name the fixed version\n- Restrict TCP access to cluster ports to trusted hosts until patched","status":"open","published_at":"2026-10-20T22:18:32+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-25T03:38:12+00:00","updated_at":"2026-10-25T03:38:12+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:38:12Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade MySQL Cluster to a release later than `26.7.1` once Oracle publishes one; the sources do not name the fixed version\n- Restrict TCP access to cluster ports to trusted hosts until patched","reach":"network","title":"MySQL Cluster: unauthenticated network flaw allows crash and data changes","impact":"medium","summary":"MySQL Cluster versions 26.7.0 through 26.7.1 have a flaw in the General component that an unauthenticated attacker can reach over TCP. Successful exploitation can crash or hang the cluster and gives partial read, insert, update and delete access to some data.","category":"package","nicknames":[],"who_cares":["mysql","mysql-cluster","database","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker crashes cluster and reads or changes some stored data","analyst_note":"Check the Oracle Critical Patch Update advisory for the fixed version and any configuration that limits exposure, since the NVD entry only lists the affected range.","how_to_check":"- Run `ndb_mgm --version` or `mysqld --version` on cluster nodes and compare against `26.7.0` and `26.7.1`\n- Check the installed MySQL Cluster package version with your OS package manager\n- unknown for any further configuration check, the sources do not say","needs_analyst":true,"not_affected_if":["other-mysql-versions","no-network-exposure"],"who_is_affected":"Teams running MySQL Cluster 26.7.0 or 26.7.1 with network reachable TCP ports. The sources do not describe any special configuration needed beyond the affected version, and attacks need a difficult condition to be met. Teams on other MySQL versions are not listed as affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000675,"input_tokens":3527,"output_tokens":644,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101769':13A,16A '-2026':12A,15A '/av':168C '26.7.0':29B,85C '26.7.1':31B,86C '3.1':155C,167C '7.0':158C 'abil':112C 'access':63B,96C,134C,140C,145C,152C 'affect':83C 'allow':6A,91C 'attack':42B,93C,104C 'avail':162C 'base':156C 'caus':114C 'chang':10A 'cluster':2A,21B,27B,54B,71C,77C,102C,125C,139C,151C 'complet':121C 'compon':38B,76C 'compromis':100C 'confidenti':159C 'crash':7A,50B,120C 'cve':11A,14A 'cvss':154C,164C,166C 'data':9A,66B,141C,153C 'databas':17B 'delet':62B,133C 'difficult':87C 'dos':122C 'exploit':48B,89C 'flaw':5A,34B 'frequent':118C 'general':37B,78C 'give':56B 'h':176C 'h/pr':170C 'hang':52B,116C 'host':25B 'impact':163C 'insert':59B,131C 'integr':160C 'l/a':175C 'l/i':174C 'mysql':1A,18B,20B,26B,70C,75C,101C,124C,138C,150C 'mysql-clust':19B 'n/ac':169C 'n/s':172C 'n/ui':171C 'network':4A,95C 'oracl':74C 'packag':22B 'partial':57B 'product':72C 'reach':44B 'read':58B,144C 'repeat':119C 'result':109C 'score':157C 'self':24B 'self-host':23B 'subset':148C 'success':47B,103C 'support':79C 'tcp':46B,98C 'u/c':173C 'unauthent':3A,41B,92C 'unauthor':111C,129C,143C 'updat':60B,130C 'vector':165C 'version':28B,80C 'via':97C 'vulner':67C,90C,107C 'well':127C","nicknames":[],"mitigations":[],"who_affected":"Teams running MySQL Cluster 26.7.0 or 26.7.1 with network reachable TCP ports. The sources do not describe any special configuration needed beyond the affected version, and attacks need a difficult condition to be met. Teams on other MySQL versions are not listed as affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101769","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101769","severity":null,"published_at":"2026-10-20T22:18:32+00:00","modified_at":"2026-10-22T18:17:21+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}