Every CVESearch/Get API key

CVE-2026-101797

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client:...

7.5 HighFix available

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.29%Unchanged since Oct 21, 2026
90%50%10%1%

What each source reports

CVE List Score used7.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Record
CVE-2026-101797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
EUVDEUVD-2026-1061987.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Record
EUVD-2026-106198
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-xwqx-9394-v3887.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client:...

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Record
GHSA-xwqx-9394-v388
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
NVD7.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Record
CVE-2026-101797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
OSVRHSA-2026:997208.8

Red Hat Security Advisory: mysql8.4 security update

Record
RHSA-2026:99720
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVRHSA-2026:997418.8

Red Hat Security Advisory: mysql:8.4 security update

Record
RHSA-2026:99741
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVRLSA-2026:997418.8

Important: mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)

  • mysql: mysql: unauthorized server takeover (CVE-2026-101772)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)

  • mysql: mysql: Denial of Service via client programs (CVE-2026-101754)

  • mysql: mysql: System takeover via client programs (CVE-2026-101770)

  • mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)

  • mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)

  • mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)

  • mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)

  • mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)

  • mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)

  • mysql: mysql: Denial of Service (CVE-2026-101778)

  • mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)

  • mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)

  • mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)

  • mysql: mysql: Denial of Service via the C API (CVE-2026-101726)

  • mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)

  • mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)

  • mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)

  • mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)

  • mysql: mysql: Denial of service in replication component (CVE-2026-101766)

  • mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)

  • mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)

  • mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)

  • mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)

  • mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)

  • mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)

  • mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)

  • mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)

  • mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)

  • mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)

  • mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)

  • mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)

  • mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)

  • mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)

  • mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)

  • mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)

  • mysql: mysql: Denial of service via DDL component (CVE-2026-101613)

  • mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)

  • mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)

  • mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)…

Record
RLSA-2026:99741
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-1017977.5

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

Record
UBUNTU-CVE-2026-101797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-12
OSVUSN-9046-1No score

mysql-8.0, mysql-8.4, mysql-9.7 vulnerabilities

Multiple security issues were discovered in MySQL.

MySQL has been updated to 8.4.13 in Ubuntu 26.04 LTS. Ubuntu 26.10 has been updated to MySQL 9.7.4. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html https://www.oracle.com/security-alerts/cpuoct2026.html

Record
USN-9046-1
Updated
2026-11-12

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql8.4
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-common
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-debugsource
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-devel-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-errmsg
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-libs
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-libs-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-server
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-server-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
Show 57 moreShow less
Affected packages
PackageAffectedFixed
mysql8.4-test-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-devel
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-test
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mysql8.4-test-data
Red Hat:enterprise_linux:10.3
From an advisory covering 65 CVEs
before 0:8.4.13-1.el10_3
0:8.4.13-1.el10_3
mecab
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.9.0+24089+64aac046.4
0:0.996-3.module+el9.9.0+24089+64aac046.4
mecab-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.9.0+24089+64aac046.4
0:0.996-3.module+el9.9.0+24089+64aac046.4
mecab-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.9.0+24089+64aac046.4
0:0.996-3.module+el9.9.0+24089+64aac046.4
mecab-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.9.0+24089+64aac046.4
0:0.996-3.module+el9.9.0+24089+64aac046.4
mecab-ipadic
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:2.7.0.20070801-24.module+el9.9.0+24089+64aac046
0:2.7.0.20070801-24.module+el9.9.0+24089+64aac046
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:2.7.0.20070801-24.module+el9.9.0+24089+64aac046
0:2.7.0.20070801-24.module+el9.9.0+24089+64aac046
mysql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-test
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-test-data
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
0:8.4.13-1.module+el9.9.0+25300+c0fc77bc
perl-DBD-MySQL
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:4.053-3.module+el9.9.0+24089+64aac046
0:4.053-3.module+el9.9.0+24089+64aac046
perl-DBD-MySQL-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:4.053-3.module+el9.9.0+24089+64aac046
0:4.053-3.module+el9.9.0+24089+64aac046
perl-DBD-MySQL-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:4.053-3.module+el9.9.0+24089+64aac046
0:4.053-3.module+el9.9.0+24089+64aac046
rapidjson
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
rapidjson-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
rapidjson-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 66 CVEs
before 0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
0:1.1.0-20.module+el9.9.0+25300+c0fc77bc
mecab
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.8.0+40162+a76274f1.4
0:0.996-3.module+el9.8.0+40162+a76274f1.4
mecab
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:0.996-3.module+el9.8.0+40205+77f4da59.4
0:0.996-3.module+el9.8.0+40205+77f4da59.4
mecab-ipadic
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1
0:2.7.0.20070801-24.module+el9.8.0+40162+a76274f1
mecab-ipadic
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:2.7.0.20070801-24.module+el9.8.0+40205+77f4da59
0:2.7.0.20070801-24.module+el9.8.0+40205+77f4da59
perl-DBD-MySQL
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:4.053-3.module+el9.8.0+40205+77f4da59
0:4.053-3.module+el9.8.0+40205+77f4da59
perl-DBD-MySQL
Rocky Linux:9
From an advisory covering 66 CVEs
before 0:4.053-3.module+el9.8.0+40162+a76274f1
0:4.053-3.module+el9.8.0+40162+a76274f1
mysql-5.5
Ubuntu:14.04:LTS
All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
None known
mysql-5.7
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 31 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm15.7.43-0ubuntu0.16.04.1+esm15.7.44-0ubuntu0.16.04.1+esm1
None known
mariadb-10.0
Ubuntu:16.04:LTS
All versions, plus listed versions
10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-7
Show 9 moreShow less
10.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.210.0.33-0ubuntu0.16.04.110.0.34-0ubuntu0.16.04.110.0.36-0ubuntu0.16.04.110.0.38-0ubuntu0.16.04.1
None known
percona-server-5.6
Ubuntu:16.04:LTS
All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
None known
mysql-5.7
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 23 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.15.7.43-0ubuntu0.18.04.1+esm15.7.44-0ubuntu0.18.04.1+esm1
None known
mariadb-10.1
Ubuntu:18.04:LTS
All versions, plus listed versions
10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.2
Show 6 moreShow less
1:10.1.40-0ubuntu0.18.04.11:10.1.41-0ubuntu0.18.04.11:10.1.43-0ubuntu0.18.04.11:10.1.44-0ubuntu0.18.04.11:10.1.47-0ubuntu0.18.04.11:10.1.48-0ubuntu0.18.04.1
None known
mysql-8.0
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 37 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.18.0.40-0ubuntu0.20.04.18.0.41-0ubuntu0.20.04.18.0.42-0ubuntu0.20.04.18.0.43-0ubuntu0.20.04.1+esm18.0.45-0ubuntu0.20.04.1+esm28.0.46-0ubuntu0.20.04.1+esm28.0.46-0ubuntu0.20.04.1+esm3
None known
mariadb-10.3
Ubuntu:20.04:LTS
All versions, plus listed versions
1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-1
Show 10 moreShow less
1:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.11:10.3.32-0ubuntu0.20.04.11:10.3.34-0ubuntu0.20.04.11:10.3.37-0ubuntu0.20.04.11:10.3.38-0ubuntu0.20.04.11:10.3.39-0ubuntu0.20.04.2
None known
mariadb-10.6
Ubuntu:22.04:LTS
All versions, plus listed versions
1:10.6.7-2ubuntu11:10.6.7-2ubuntu1.11:10.6.11-0ubuntu0.22.04.11:10.6.12-0ubuntu0.22.04.11:10.6.16-0ubuntu0.22.04.1
Show 4 moreShow less
1:10.6.18-0ubuntu0.22.04.11:10.6.21-0ubuntu0.22.04.21:10.6.22-0ubuntu0.22.04.11:10.6.23-0ubuntu0.22.04.1
None known
mysql-8.0
Ubuntu:22.04:LTS
before 8.0.46-0ubuntu0.22.04.5, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 26 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.18.0.41-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.28.0.43-0ubuntu0.22.04.18.0.43-0ubuntu0.22.04.28.0.44-0ubuntu0.22.04.18.0.44-0ubuntu0.22.04.28.0.45-0ubuntu0.22.04.18.0.46-0ubuntu0.22.04.28.0.46-0ubuntu0.22.04.38.0.46-0ubuntu0.22.04.4
8.0.46-0ubuntu0.22.04.5
mariadb
Ubuntu:24.04:LTS
All versions, plus listed versions
1:10.11.4-11:10.11.5-31:10.11.6-11:10.11.6-21:10.11.7-2ubuntu1
Show 5 moreShow less
1:10.11.7-2ubuntu21:10.11.8-0ubuntu0.24.04.11:10.11.11-0ubuntu0.24.04.21:10.11.13-0ubuntu0.24.04.11:10.11.14-0ubuntu0.24.04.1
None known
mysql-8.0
Ubuntu:24.04:LTS
before 8.0.46-0ubuntu0.24.04.5, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 17 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.18.0.41-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.28.0.43-0ubuntu0.24.04.18.0.43-0ubuntu0.24.04.28.0.44-0ubuntu0.24.04.18.0.44-0ubuntu0.24.04.28.0.45-0ubuntu0.24.04.18.0.46-0ubuntu0.24.04.28.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
8.0.46-0ubuntu0.24.04.5
mariadb
Ubuntu:26.10
All versions, plus listed versions
1:11.8.6-51:11.8.8-11:11.8.9+ds-4ubuntu2
None known
mysql-9.7
Ubuntu:26.10
before 9.7.4-0ubuntu0.26.10.1, plus listed versions
9.7.2-49.7.2-4ubuntu1
9.7.4-0ubuntu0.26.10.1
mariadb
Ubuntu:26.04:LTS
All versions, plus listed versions
1:11.8.3-1build11:11.8.5-11:11.8.5-21:11.8.5-31:11.8.5-4
Show 5 moreShow less
1:11.8.6-11:11.8.6-31:11.8.6-41:11.8.6-51:11.8.6-5ubuntu0.1
None known
mysql-8.4
Ubuntu:26.04:LTS
before 8.4.13-0ubuntu0.26.04.2, plus listed versions
8.4.6-0ubuntu38.4.7-0ubuntu28.4.7-0ubuntu38.4.8-0ubuntu18.4.9-0ubuntu0.26.04.18.4.10-0ubuntu0.26.04.18.4.11-0ubuntu0.26.04.1
8.4.13-0ubuntu0.26.04.2
mysql-8.0
Ubuntu:22.04:LTS
From an advisory covering 73 CVEs
before 8.0.46-0ubuntu0.22.04.5, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 26 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.18.0.41-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.28.0.43-0ubuntu0.22.04.18.0.43-0ubuntu0.22.04.28.0.44-0ubuntu0.22.04.18.0.44-0ubuntu0.22.04.28.0.45-0ubuntu0.22.04.18.0.46-0ubuntu0.22.04.28.0.46-0ubuntu0.22.04.38.0.46-0ubuntu0.22.04.4
8.0.46-0ubuntu0.22.04.5
mysql-8.0
Ubuntu:24.04:LTS
From an advisory covering 73 CVEs
before 8.0.46-0ubuntu0.24.04.5, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 17 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.18.0.41-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.28.0.43-0ubuntu0.24.04.18.0.43-0ubuntu0.24.04.28.0.44-0ubuntu0.24.04.18.0.44-0ubuntu0.24.04.28.0.45-0ubuntu0.24.04.18.0.46-0ubuntu0.24.04.28.0.46-0ubuntu0.24.04.38.0.46-0ubuntu0.24.04.4
8.0.46-0ubuntu0.24.04.5
mysql-9.7
Ubuntu:26.10
From an advisory covering 73 CVEs
before 9.7.4-0ubuntu0.26.10.1, plus listed versions
9.7.2-49.7.2-4ubuntu1
9.7.4-0ubuntu0.26.10.1
mysql-8.4
Ubuntu:26.04:LTS
From an advisory covering 73 CVEs
before 8.4.13-0ubuntu0.26.04.2, plus listed versions
8.4.6-0ubuntu38.4.7-0ubuntu28.4.7-0ubuntu38.4.8-0ubuntu18.4.9-0ubuntu0.26.04.18.4.10-0ubuntu0.26.04.18.4.11-0ubuntu0.26.04.1
8.4.13-0ubuntu0.26.04.2

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-101797 is a high vulnerability (CVSS 7.5) in Oracle Corporation Mysql Cluster, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in mysql-8.0 8.0.46-0ubuntu0.22.04.5.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 152 references and the rest of 1 source description. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open