This vulnerability affects Oracle MySQL Server and MySQL Cluster components related to replication. Supported affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. A high privileged attacker with network access via multiple protocols can exploit this vulnerability to cause a hang or repeated crash of the MySQL Server or Cluster, resulting in a complete denial of service. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. Oracle's July 2026 Critical Patch Update advisory references this vulnerability among many others and provides patch availability information.

Successful exploitation results in denial of service by causing the MySQL Server or MySQL Cluster to hang or crash repeatedly. There is no impact on confidentiality or integrity. The vulnerability requires high privileges and network access, limiting exploitation to privileged users. The overall impact is medium severity due to availability disruption.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, which provides security patches addressing this and many other vulnerabilities. Customers are strongly advised to apply the relevant patches from the July 2026 CPU without delay. No temporary or alternative mitigations are specified. Patch status is not explicitly stated beyond inclusion in the CPU; therefore, check the Oracle advisory for the latest patch availability and installation instructions.