CVE-2026-101774
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used 6.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
- Record
CVE-2026-101774- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2026-106175 6.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
- Record
EUVD-2026-106175- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p2vw-75hf-vpxg 6.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
- Record
GHSA-p2vw-75hf-vpxg- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
NVD 6.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
- Record
CVE-2026-101774- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
OSVRLSA-2026:99741 8.8
Important: mysql:8.4 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.
Security Fix(es):
mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)
mysql: mysql: unauthorized server takeover (CVE-2026-101772)
mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)
mysql: mysql: Denial of Service via client programs (CVE-2026-101754)
mysql: mysql: System takeover via client programs (CVE-2026-101770)
mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)
mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)
mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)
mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)
mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)
mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)
mysql: mysql: Denial of Service (CVE-2026-101778)
mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)
mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)
mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)
mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)
mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)
mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)
mysql: mysql: Denial of Service via the C API (CVE-2026-101726)
mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)
mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)
mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)
mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)
mysql: mysql: Denial of service in replication component (CVE-2026-101766)
mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)
mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)
mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)
mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)
mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)
mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)
mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)
mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)
mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)
mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)
mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)
mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)
mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)
mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)
mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)
mysql: mysql: Denial of service via DDL component (CVE-2026-101613)
mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)
mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)
mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)…
- Record
RLSA-2026:99741- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-13
OSVUBUNTU-CVE-2026-101774 6.5
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
- Record
UBUNTU-CVE-2026-101774- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-12
OSVUSN-9046-1No score
mysql-8.0, mysql-8.4, mysql-9.7 vulnerabilities
Multiple security issues were discovered in MySQL.
MySQL has been updated to 8.4.13 in Ubuntu 26.04 LTS. Ubuntu 26.10 has been updated to MySQL 9.7.4. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches.
In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.
Please see the following for more information:
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html https://www.oracle.com/security-alerts/cpuoct2026.html
- Record
USN-9046-1- Updated
- 2026-11-12
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mecabRocky Linux:9 From an advisory covering 66 CVEs | before 0:0.996-3.module+el9.8.0+40162+a76274f1.4 | 0:0.996-3.module+el9.8.0+40162+a76274f1.4 |
mecabRocky Linux:9 From an advisory covering 66 CVEs | before 0:0.996-3.module+el9.8.0+40205+77f4da59.4 | 0:0.996-3.module+el9.8.0+40205+77f4da59.4 |
mecab-ipadicRocky Linux:9 From an advisory covering 66 CVEs | before 0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1 | 0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1 |
mecab-ipadicRocky Linux:9 From an advisory covering 66 CVEs | before 0:2.7.0.20070801-24.module+el9.8.0+40205+77f4da59 | 0:2.7.0.20070801-24.module+el9.8.0+40205+77f4da59 |
perl-DBD-MySQLRocky Linux:9 From an advisory covering 66 CVEs | before 0:4.053-3.module+el9.8.0+40205+77f4da59 | 0:4.053-3.module+el9.8.0+40205+77f4da59 |
perl-DBD-MySQLRocky Linux:9 From an advisory covering 66 CVEs | before 0:4.053-3.module+el9.8.0+40162+a76274f1 | 0:4.053-3.module+el9.8.0+40162+a76274f1 |
mysql-5.5Ubuntu:14.04:LTS | All versions, plus listed versions 5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1 Show 20 moreShow less5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1 | None known |
mysql-5.7Ubuntu:Pro:16.04:LTS | All versions, plus listed versions 5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1 Show 31 moreShow less5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm15.7.43-0ubuntu0.16.04.1+esm15.7.44-0ubuntu0.16.04.1+esm1 | None known |
mariadb-10.0Ubuntu:16.04:LTS | All versions, plus listed versions 10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7 Show 9 moreShow less10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.110.0.36-0ubuntu0.16.04.110.0.38-0ubuntu0.16.04.1 | None known |
percona-server-5.6Ubuntu:16.04:LTS | All versions, plus listed versions 5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1 | None known |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
percona-xtradb-cluster-5.6Ubuntu:16.04:LTS | All versions, plus listed versions 5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2 | None known |
mysql-5.7Ubuntu:Pro:18.04:LTS | All versions, plus listed versions 5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1 Show 23 moreShow less5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.15.7.43-0ubuntu0.18.04.1+esm15.7.44-0ubuntu0.18.04.1+esm1 | None known |
mariadb-10.1Ubuntu:18.04:LTS | All versions, plus listed versions 10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.2 Show 6 moreShow less1:10.1.40-0ubuntu0.18.04.11:10.1.41-0ubuntu0.18.04.11:10.1.43-0ubuntu0.18.04.11:10.1.44-0ubuntu0.18.04.11:10.1.47-0ubuntu0.18.04.11:10.1.48-0ubuntu0.18.04.1 | None known |
mysql-8.0Ubuntu:Pro:20.04:LTS | All versions, plus listed versions 8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5 Show 37 moreShow less8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.18.0.40-0ubuntu0.20.04.18.0.41-0ubuntu0.20.04.18.0.42-0ubuntu0.20.04.18.0.43-0ubuntu0.20.04.1+esm18.0.45-0ubuntu0.20.04.1+esm28.0.46-0ubuntu0.20.04.1+esm28.0.46-0ubuntu0.20.04.1+esm3 | None known |
mariadb-10.3Ubuntu:20.04:LTS | All versions, plus listed versions 1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-1 Show 10 moreShow less1:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.11:10.3.32-0ubuntu0.20.04.11:10.3.34-0ubuntu0.20.04.11:10.3.37-0ubuntu0.20.04.11:10.3.38-0ubuntu0.20.04.11:10.3.39-0ubuntu0.20.04.2 | None known |
mariadb-10.6Ubuntu:22.04:LTS | All versions, plus listed versions 1:10.6.7-2ubuntu11:10.6.7-2ubuntu1.11:10.6.11-0ubuntu0.22.04.11:10.6.12-0ubuntu0.22.04.11:10.6.16-0ubuntu0.22.04.1 Show 4 moreShow less1:10.6.18-0ubuntu0.22.04.11:10.6.21-0ubuntu0.22.04.21:10.6.22-0ubuntu0.22.04.11:10.6.23-0ubuntu0.22.04.1 | None known |
mysql-8.0Ubuntu:22.04:LTS | before 8.0.46-0ubuntu0.22.04.5, plus listed versions 8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1 Show 26 moreShow less8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.18.0.41-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.28.0.43-0ubuntu0.22.04.18.0.43-0ubuntu0.22.04.28.0.44-0ubuntu0.22.04.18.0.44-0ubuntu0.22.04.28.0.45-0ubuntu0.22.04.18.0.46-0ubuntu0.22.04.28.0.46-0ubuntu0.22.04.38.0.46-0ubuntu0.22.04.4 | 8.0.46-0ubuntu0.22.04.5 |
mariadbUbuntu:24.04:LTS | All versions, plus listed versions 1:10.11.4-11:10.11.5-31:10.11.6-11:10.11.6-21:10.11.7-2ubuntu1 Show 5 moreShow less1:10.11.7-2ubuntu21:10.11.8-0ubuntu0.24.04.11:10.11.11-0ubuntu0.24.04.21:10.11.13-0ubuntu0.24.04.11:10.11.14-0ubuntu0.24.04.1 | None known |
mysql-8.0Ubuntu:24.04:LTS | before 8.0.46-0ubuntu0.24.04.5, plus listed versions 8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1 Show 17 moreShow less8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.18.0.41-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.28.0.43-0ubuntu0.24.04.18.0.43-0ubuntu0.24.04.28.0.44-0ubuntu0.24.04.18.0.44-0ubuntu0.24.04.28.0.45-0ubuntu0.24.04.18.0.46-0ubuntu0.24.04.28.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4 | 8.0.46-0ubuntu0.24.04.5 |
mariadbUbuntu:26.10 | All versions, plus listed versions 1:11.8.6-51:11.8.8-11:11.8.9+ds-4ubuntu2 | None known |
mysql-9.7Ubuntu:26.10 | before 9.7.4-0ubuntu0.26.10.1, plus listed versions 9.7.2-49.7.2-4ubuntu1 | 9.7.4-0ubuntu0.26.10.1 |
mariadbUbuntu:26.04:LTS | All versions, plus listed versions 1:11.8.3-1build11:11.8.5-11:11.8.5-21:11.8.5-31:11.8.5-4 Show 5 moreShow less1:11.8.6-11:11.8.6-31:11.8.6-41:11.8.6-51:11.8.6-5ubuntu0.1 | None known |
mysql-8.4Ubuntu:26.04:LTS | before 8.4.13-0ubuntu0.26.04.2, plus listed versions 8.4.6-0ubuntu38.4.7-0ubuntu28.4.7-0ubuntu38.4.8-0ubuntu18.4.9-0ubuntu0.26.04.18.4.10-0ubuntu0.26.04.18.4.11-0ubuntu0.26.04.1 | 8.4.13-0ubuntu0.26.04.2 |
mysql-8.0Ubuntu:22.04:LTS From an advisory covering 73 CVEs | before 8.0.46-0ubuntu0.22.04.5, plus listed versions 8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1 Show 26 moreShow less8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.18.0.41-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.28.0.43-0ubuntu0.22.04.18.0.43-0ubuntu0.22.04.28.0.44-0ubuntu0.22.04.18.0.44-0ubuntu0.22.04.28.0.45-0ubuntu0.22.04.18.0.46-0ubuntu0.22.04.28.0.46-0ubuntu0.22.04.38.0.46-0ubuntu0.22.04.4 | 8.0.46-0ubuntu0.22.04.5 |
mysql-8.0Ubuntu:24.04:LTS From an advisory covering 73 CVEs | before 8.0.46-0ubuntu0.24.04.5, plus listed versions 8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1 Show 17 moreShow less8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.18.0.41-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.28.0.43-0ubuntu0.24.04.18.0.43-0ubuntu0.24.04.28.0.44-0ubuntu0.24.04.18.0.44-0ubuntu0.24.04.28.0.45-0ubuntu0.24.04.18.0.46-0ubuntu0.24.04.28.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4 | 8.0.46-0ubuntu0.24.04.5 |
mysql-9.7Ubuntu:26.10 From an advisory covering 73 CVEs | before 9.7.4-0ubuntu0.26.10.1, plus listed versions 9.7.2-49.7.2-4ubuntu1 | 9.7.4-0ubuntu0.26.10.1 |
mysql-8.4Ubuntu:26.04:LTS From an advisory covering 73 CVEs | before 8.4.13-0ubuntu0.26.04.2, plus listed versions 8.4.6-0ubuntu38.4.7-0ubuntu28.4.7-0ubuntu38.4.8-0ubuntu18.4.9-0ubuntu0.26.04.18.4.10-0ubuntu0.26.04.18.4.11-0ubuntu0.26.04.1 | 8.4.13-0ubuntu0.26.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-101774 is a medium vulnerability (CVSS 6.5) in Oracle Mysql Cluster, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in mysql-8.0 8.0.46-0ubuntu0.22.04.5.
References
oracle.com/security-alerts/cpuoct2026.html
nvd.nist.gov/vuln/detail/CVE-2026-101774
github.com/advisories/GHSA-p2vw-75hf-vpxg
errata.rockylinux.org/RLSA-2026:99741
bugzilla.redhat.com/show_bug.cgi?id=2556715
bugzilla.redhat.com/show_bug.cgi?id=2556754
Show 140 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2556772
bugzilla.redhat.com/show_bug.cgi?id=2556828
bugzilla.redhat.com/show_bug.cgi?id=2556853
bugzilla.redhat.com/show_bug.cgi?id=2556857
bugzilla.redhat.com/show_bug.cgi?id=2556916
bugzilla.redhat.com/show_bug.cgi?id=2556952
bugzilla.redhat.com/show_bug.cgi?id=2557019
bugzilla.redhat.com/show_bug.cgi?id=2557059
bugzilla.redhat.com/show_bug.cgi?id=2557066
bugzilla.redhat.com/show_bug.cgi?id=2557095
bugzilla.redhat.com/show_bug.cgi?id=2557109
bugzilla.redhat.com/show_bug.cgi?id=2557111
bugzilla.redhat.com/show_bug.cgi?id=2557116
bugzilla.redhat.com/show_bug.cgi?id=2557128
bugzilla.redhat.com/show_bug.cgi?id=2557143
bugzilla.redhat.com/show_bug.cgi?id=2557158
bugzilla.redhat.com/show_bug.cgi?id=2557179
bugzilla.redhat.com/show_bug.cgi?id=2557183
bugzilla.redhat.com/show_bug.cgi?id=2557186
bugzilla.redhat.com/show_bug.cgi?id=2557208
bugzilla.redhat.com/show_bug.cgi?id=2557217
bugzilla.redhat.com/show_bug.cgi?id=2557240
bugzilla.redhat.com/show_bug.cgi?id=2557253
bugzilla.redhat.com/show_bug.cgi?id=2557263
bugzilla.redhat.com/show_bug.cgi?id=2557265
bugzilla.redhat.com/show_bug.cgi?id=2557285
bugzilla.redhat.com/show_bug.cgi?id=2557297
bugzilla.redhat.com/show_bug.cgi?id=2557323
bugzilla.redhat.com/show_bug.cgi?id=2557332
bugzilla.redhat.com/show_bug.cgi?id=2557345
bugzilla.redhat.com/show_bug.cgi?id=2557362
bugzilla.redhat.com/show_bug.cgi?id=2557363
bugzilla.redhat.com/show_bug.cgi?id=2557388
bugzilla.redhat.com/show_bug.cgi?id=2557393
bugzilla.redhat.com/show_bug.cgi?id=2557409
bugzilla.redhat.com/show_bug.cgi?id=2557469
bugzilla.redhat.com/show_bug.cgi?id=2557470
bugzilla.redhat.com/show_bug.cgi?id=2557516
bugzilla.redhat.com/show_bug.cgi?id=2557518
bugzilla.redhat.com/show_bug.cgi?id=2557530
bugzilla.redhat.com/show_bug.cgi?id=2557542
bugzilla.redhat.com/show_bug.cgi?id=2557556
bugzilla.redhat.com/show_bug.cgi?id=2557573
bugzilla.redhat.com/show_bug.cgi?id=2557589
bugzilla.redhat.com/show_bug.cgi?id=2557606
bugzilla.redhat.com/show_bug.cgi?id=2557607
bugzilla.redhat.com/show_bug.cgi?id=2557637
bugzilla.redhat.com/show_bug.cgi?id=2557717
bugzilla.redhat.com/show_bug.cgi?id=2557736
bugzilla.redhat.com/show_bug.cgi?id=2557749
bugzilla.redhat.com/show_bug.cgi?id=2557786
bugzilla.redhat.com/show_bug.cgi?id=2557796
bugzilla.redhat.com/show_bug.cgi?id=2557799
bugzilla.redhat.com/show_bug.cgi?id=2557822
bugzilla.redhat.com/show_bug.cgi?id=2557830
bugzilla.redhat.com/show_bug.cgi?id=2557834
bugzilla.redhat.com/show_bug.cgi?id=2557851
bugzilla.redhat.com/show_bug.cgi?id=2557856
bugzilla.redhat.com/show_bug.cgi?id=2557873
bugzilla.redhat.com/show_bug.cgi?id=2557876
bugzilla.redhat.com/show_bug.cgi?id=2557877
bugzilla.redhat.com/show_bug.cgi?id=2557902
bugzilla.redhat.com/show_bug.cgi?id=2557945
bugzilla.redhat.com/show_bug.cgi?id=2561515
access.redhat.com/errata/RHSA-2026:99741
ubuntu.com/security/CVE-2026-101774
cve.org/CVERecord?id=CVE-2026-101774
ubuntu.com/security/notices/USN-9046-1
ubuntu.com/security/CVE-2026-101607
ubuntu.com/security/CVE-2026-101608
ubuntu.com/security/CVE-2026-101609
ubuntu.com/security/CVE-2026-101610
ubuntu.com/security/CVE-2026-101611
ubuntu.com/security/CVE-2026-101612
ubuntu.com/security/CVE-2026-101613
ubuntu.com/security/CVE-2026-101614
ubuntu.com/security/CVE-2026-101615
ubuntu.com/security/CVE-2026-101616
ubuntu.com/security/CVE-2026-101617
ubuntu.com/security/CVE-2026-101618
ubuntu.com/security/CVE-2026-101619
ubuntu.com/security/CVE-2026-101620
ubuntu.com/security/CVE-2026-101621
ubuntu.com/security/CVE-2026-101622
ubuntu.com/security/CVE-2026-101623
ubuntu.com/security/CVE-2026-101624
ubuntu.com/security/CVE-2026-101627
ubuntu.com/security/CVE-2026-101629
ubuntu.com/security/CVE-2026-101637
ubuntu.com/security/CVE-2026-101679
ubuntu.com/security/CVE-2026-101721
ubuntu.com/security/CVE-2026-101722
ubuntu.com/security/CVE-2026-101724
ubuntu.com/security/CVE-2026-101725
ubuntu.com/security/CVE-2026-101726
ubuntu.com/security/CVE-2026-101727
ubuntu.com/security/CVE-2026-101728
ubuntu.com/security/CVE-2026-101729
ubuntu.com/security/CVE-2026-101730
ubuntu.com/security/CVE-2026-101731
ubuntu.com/security/CVE-2026-101732
ubuntu.com/security/CVE-2026-101733
ubuntu.com/security/CVE-2026-101747
ubuntu.com/security/CVE-2026-101748
ubuntu.com/security/CVE-2026-101750
ubuntu.com/security/CVE-2026-101751
ubuntu.com/security/CVE-2026-101752
ubuntu.com/security/CVE-2026-101753
ubuntu.com/security/CVE-2026-101754
ubuntu.com/security/CVE-2026-101756
ubuntu.com/security/CVE-2026-101760
ubuntu.com/security/CVE-2026-101761
ubuntu.com/security/CVE-2026-101762
ubuntu.com/security/CVE-2026-101766
ubuntu.com/security/CVE-2026-101770
ubuntu.com/security/CVE-2026-101771
ubuntu.com/security/CVE-2026-101772
ubuntu.com/security/CVE-2026-101773
ubuntu.com/security/CVE-2026-101775
ubuntu.com/security/CVE-2026-101776
ubuntu.com/security/CVE-2026-101777
ubuntu.com/security/CVE-2026-101778
ubuntu.com/security/CVE-2026-101779
ubuntu.com/security/CVE-2026-101780
ubuntu.com/security/CVE-2026-101781
ubuntu.com/security/CVE-2026-101784
ubuntu.com/security/CVE-2026-101785
ubuntu.com/security/CVE-2026-101787
ubuntu.com/security/CVE-2026-101788
ubuntu.com/security/CVE-2026-101789
ubuntu.com/security/CVE-2026-101794
ubuntu.com/security/CVE-2026-101795
ubuntu.com/security/CVE-2026-101796
ubuntu.com/security/CVE-2026-101797
ubuntu.com/security/CVE-2026-101798
ubuntu.com/security/CVE-2026-101799
ubuntu.com/security/CVE-2026-101800
ubuntu.com/security/CVE-2026-101801
ubuntu.com/security/CVE-2026-101802
ubuntu.com/security/CVE-2026-101803
Left out here: the rest of 1 source description. The JSON record has them.