Live › vulnerability › CVE-2026-101810
Go to dashboardMySQL Router 26.7.0 has a flaw in its general request handling that lets an unauthenticated attacker over the network make the router hang or repeatedly crash. The impact is denial of service only; the sources report no code execution or data exposure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments running MySQL Router 26.7.0 that accept network connections from clients. The sources do not describe a non-default configuration that is required. Routers on other versions are not listed as affected.
No product ranges from the sources yet.
mysqlrouter --version and check whether it reports 26.7.026.7.0; the sources do not name the fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Router. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101810")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.