CVE-2026-101679 Oracle Corporation CVE debrief

Who should care

MySQL Server and MySQL Cluster administrators, Database security teams, IT security teams responsible for patch management, Network security teams, Compliance and risk management teams, System administrators responsible for MySQL deployments, Cloud service providers hosting MySQL instances, Developers integrating with MySQL in their applications

Why it matters

CVE-2026-101679 is a high-severity vulnerability in MySQL Server and MySQL Cluster that allows unauthenticated DOS attacks. MySQL administrators and security teams should assess exposure, prioritize patching, and implement compensating controls to prevent exploitation.

• Potential for denial of service (DOS) attacks against MySQL Server and MySQL Cluster
• Need for urgent patching or mitigation to prevent exploitation
• Potential impact on database availability and business operations
• Requirement for network access controls and monitoring to detect potential attacks

Technical summary

The vulnerability, CVE-2026-101679, affects MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. It allows unauthenticated network attackers to cause a hang or frequently repeatable crash of MySQL Server and MySQL Cluster. The CVSS 3.1 Base Score is 7.5 (Availability impacts). Administrators should assess exposure and apply patches or mitigations accordingly. The vulnerability can be exploited via multiple protocols, emphasizing the need for network access controls.

Defensive priority

High priority for MySQL Server and MySQL Cluster administrators to assess exposure and apply patches

Recommended defensive actions

• Assess exposure of MySQL Server and MySQL Cluster instances to this vulnerability
• Verify affected versions and apply patches or updates as available from Oracle
• Monitor for potential DOS attacks and implement compensating controls if patches cannot be applied immediately
• Review network access controls to limit exposure to unauthenticated attacks
• Perform vulnerability scanning to identify potentially affected systems
• Implement additional monitoring for unusual database activity
• Coordinate with Oracle support for patch application guidance

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and CVSS score. Oracle's advisory is referenced as a source for addressing the issue. The vulnerability affects MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Evidence is limited to public CVE details and NVD assessments; further verification is recommended.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.