CVE-2026-101776 Oracle Corporation CVE debrief

Who should care

MySQL Server and MySQL Cluster administrators, database security teams, IT personnel responsible for patch management and vulnerability remediation, and anyone responsible for the security and availability of MySQL Server and MySQL Cluster deployments should be aware of this vulnerability. These individuals should assess their exposure, prioritize patching, and monitor for potential impacts.

Why it matters

CVE-2026-101776 is a medium-severity vulnerability in MySQL Server and MySQL Cluster that allows high-privileged attackers to cause a denial of service. MySQL administrators and security teams should assess exposure, prioritize patching, and monitor for potential impacts.

• Potential denial of service (DOS) impacting availability.
• Requires verification of affected versions and exposure.
• Necessitates patching or updating to prevent exploitation.
• May require monitoring for unusual activity or crashes.

Technical summary

The vulnerability is in the Server: Group Replication Plugin component of MySQL Server and MySQL Cluster. A high-privileged attacker with network access via multiple protocols can exploit this vulnerability to compromise MySQL Server and MySQL Cluster, resulting in a denial of service (DOS). This can lead to a hang or frequently repeatable crash of MySQL Server and MySQL Cluster. The vulnerability has a CVSS 3.1 Base Score of 4.9 (Availability impacts) and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Defensive priority

Medium priority for MySQL Server and MySQL Cluster administrators to assess exposure and apply patches.

Recommended defensive actions

• Assess exposure of MySQL Server and MySQL Cluster instances to this vulnerability.
• Apply patches or updates provided by Oracle Corporation to affected versions.
• Review network access controls to limit high-privileged attacker access.
• Monitor MySQL Server and MySQL Cluster for unusual activity or crashes.
• Inventory and track MySQL Server and MySQL Cluster deployments to ensure visibility.
• Review change management processes to incorporate patching for this vulnerability.
• Verify that monitoring and detection systems are in place for affected systems.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and potential impact. Oracle Corporation has provided an advisory for this vulnerability. MySQL Server and MySQL Cluster administrators should verify their deployments against the list of affected versions (MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1) and assess exposure. They should also review Oracle's advisory for specific guidance on patching and mitigation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.