CVE-2026-101720: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker with network access to the affected MySQL Server or MySQL Cluster may exploit it. The attack can be conducted through multiple protocols and requires no user interaction.
What is the potential impact of a successful attack?
A successful attack can allow unauthorized update, insert, or delete operations on some data accessible to the affected MySQL Server or MySQL Cluster. The stated impact is limited to integrity; no confidentiality or availability impact is listed.
Which deployments should be prioritized for remediation?
Prioritize MySQL Server and MySQL Cluster instances running versions 26.7.0 through 26.7.1 that are reachable over the network. The provided information does not identify a configuration prerequisite, so affected-version deployments should be assessed regardless of configuration.