CVE-2026-101773: MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; +1 more affected products

Affected technology

MySQL Server · 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1
Oracle Corporation

MySQL Cluster · 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Unauthenticated attacker with access to the physical communication segment attached can the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.