CVE-2026-101778 Oracle Corporation CVE debrief

Who should care

MySQL Server and MySQL Cluster administrators, database security teams, and IT personnel responsible for patch management and vulnerability remediation. These individuals should assess exposure, apply patches, and monitor for potential exploitation attempts. Additionally, security teams and IT personnel should review compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

CVE-2026-101778 is a medium-severity vulnerability in MySQL Server and MySQL Cluster that allows a low-privileged attacker to cause a DOS. MySQL Server and MySQL Cluster administrators should assess exposure, apply patches, and monitor for potential exploitation attempts.

• Potential DOS impacting availability of MySQL Server and MySQL Cluster instances
• Need to verify exposure of affected versions in inventory
• Requires patching or updates to affected versions to prevent exploitation
• Monitoring for potential exploitation attempts is recommended

Technical summary

The vulnerability affects MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. A low-privileged attacker with network access can exploit this vulnerability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and MySQL Cluster. The CVSS score for this vulnerability is 6.5, indicating a medium severity. The vulnerability can be exploited via multiple protocols, and successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster.

Defensive priority

Medium priority for MySQL Server and MySQL Cluster administrators to assess exposure and apply patches.

Recommended defensive actions

• Assess exposure of MySQL Server and MySQL Cluster instances to this vulnerability
• Apply patches or updates to affected versions
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and CVSS score. The vulnerability is a medium-severity issue in MySQL Server and MySQL Cluster that allows a low-privileged attacker to cause a DOS. The CVE record was published on 2026-10-20T21:22:52.574Z and has not been modified since then. The NVD entry provides additional information on the vulnerability, including its CVSS score and vector.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.