This vulnerability in Oracle MySQL Server and MySQL Cluster (component: Server: Replication) allows a high privileged attacker with network access via multiple protocols to cause a hang or frequent crash of the server, leading to a complete denial of service. The CVSS 3.1 base score is 4.4, reflecting a medium severity with an impact on availability only (no confidentiality or integrity impact). The affected versions are MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Oracle's July 2026 Critical Patch Update advisory includes this vulnerability among 1449 security patches. The advisory recommends applying patches promptly but does not explicitly confirm the patch status for this specific vulnerability. No known exploits have been reported in the wild.

Successful exploitation allows a high privileged attacker with network access to cause a hang or repeated crash of MySQL Server or MySQL Cluster, resulting in a denial of service condition. There is no impact on confidentiality or integrity. The vulnerability is difficult to exploit and requires high privileges and network access via multiple protocols.

Oracle's July 2026 Critical Patch Update advisory includes security patches addressing this vulnerability. Customers are strongly recommended to remain on actively-supported versions and apply the available security patches without delay. Patch status for this specific vulnerability is not explicitly confirmed in the advisory; therefore, check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch availability and installation instructions.