CVE-2026-101772 Oracle Corporation CVE debrief

Who should care

MySQL Server and MySQL Cluster administrators, Database security teams, IT security teams responsible for vulnerability management, operators of MySQL Server and MySQL Cluster, platform owners with MySQL deployments, vulnerability management teams, and security teams monitoring database infrastructure.

Why it matters

CVE-2026-101772 is a high-severity vulnerability in MySQL Server and MySQL Cluster that allows unauthenticated attackers to potentially compromise the server. MySQL Server and MySQL Cluster administrators should assess exposure, prioritize patching, and implement compensating controls.

• Potential takeover of MySQL Server and MySQL Cluster
• Compromise of confidentiality, integrity, and availability
• Requires verification of affected versions and exposure
• High priority for patching and mitigation

Technical summary

The vulnerability, located in the Client programs component of MySQL Server and MySQL Cluster, allows an unauthenticated attacker with network access via multiple protocols to compromise the server. Successful attacks can result in a takeover of MySQL Server and MySQL Cluster. Affected versions include MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1.

Defensive priority

High priority for MySQL Server and MySQL Cluster administrators

Recommended defensive actions

• Review and apply Oracle's security patch for MySQL Server and MySQL Cluster
• Assess exposure based on current MySQL Server and MySQL Cluster versions
• Implement compensating controls to monitor and restrict network access
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and Oracle advisory provide details on the vulnerability, affected versions, and potential impacts. MySQL Server and MySQL Cluster administrators should verify their deployments against the affected versions: MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. Defenders should focus on validating exposure and applying patches or mitigations.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.