CVE-2026-101773

Public on 2026-10-20
Modified on 2026-10-22
Description
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.1
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core mariadb Not Affected
Amazon Linux 2023 mariadb1011 Not Affected
Amazon Linux 2027 Preview mariadb1011 Not Affected
Amazon Linux 2023 mariadb105 No Fix Planned
Amazon Linux 2023 mariadb114 Not Affected
Amazon Linux 2027 Preview mariadb114 Not Affected
Amazon Linux 2023 mariadb118 Not Affected
Amazon Linux 2027 Preview mariadb118 Not Affected
Amazon Linux 2023 mariadb123 Not Affected
Amazon Linux 2027 Preview mariadb123 Not Affected
Amazon Linux 2 - Core perl-DBD-MySQL Not Affected
Amazon Linux 2023 perl-DBD-MySQL Not Affected
Amazon Linux 2023 perl-DateTime-Format-MySQL Not Affected
Amazon Linux 2027 Preview perl-DateTime-Format-MySQL Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H