UBUNTU-CVE-2026-101722: Medium severity ubuntu/mysql-5.5 vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/mysql-9.7to a version that resolves this vulnerability.Fixed in 9.7.4-0ubuntu0.26.10.1
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker needs network access to the MySQL Server or MySQL Cluster instance and low-privileged access. No user interaction is required, and the vulnerability can be reached through multiple protocols.
What is the likely impact of successful exploitation?
Successful exploitation can allow unauthorized reading of a subset of data accessible through the affected MySQL Server or MySQL Cluster deployment. The provided CVSS vector indicates confidentiality impact only, with no stated integrity or availability impact.
Which upstream versions are identified as affected?
Affected MySQL Server versions are 9.7.0 through 9.7.3 and 26.7.0 through 26.7.1. Affected MySQL Cluster versions are 9.7.0 through 9.7.3 and 26.7.0 through 26.7.1.