Live › vulnerability › CVE-2026-101771
Go to dashboardA flaw in the client programs component of MySQL Server and MySQL Cluster can be exploited over the network by an unauthenticated attacker. Successful attacks can result in takeover of the MySQL Server or MySQL Cluster.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Server or MySQL Cluster in the listed version ranges that accept network connections. Hosts where MySQL is bound to localhost or sits behind a firewall with no external access are less exposed. The sources do not state the exact fixed versions or the specific client program involved.
No product ranges from the sources yet.
mysqld --version on each database host and compare against the affected ranges: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1, and 8.0.0-8.0.49 for MySQL Cluster.ss -ltnp | grep mysql.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101771")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.