Live › vulnerability › CVE-2026-101772
Go to dashboardA flaw in the MySQL client programs component of MySQL Server and MySQL Cluster can be exploited over the network by an unauthenticated attacker. Successful exploitation can result in full takeover of the MySQL Server or Cluster, per the NVD description (CVSS 8.1).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Server or MySQL Cluster in the affected version ranges, reachable over the network. The sources do not say which configurations or client protocols are required beyond network access. Teams on other database products or versions outside the listed ranges can skip it.
No product ranges from the sources yet.
mysql --version on hosts with MySQL Server or Cluster installed and compare against the affected ranges: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1, and 8.0.0-8.0.49 for MySQL Cluster.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101772")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.