This vulnerability in Oracle MySQL Server and MySQL Cluster (versions 9.7.0-9.7.1) affects the JSON Duality component and can be exploited by a high privileged attacker with network access through multiple protocols. Successful exploitation results in unauthorized denial of service by causing the server to hang or crash repeatedly. The CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact. The vendor advisory does not explicitly confirm a patch or remediation level for this specific vulnerability but advises applying Critical Patch Updates promptly. No exploits have been reported in the wild.

The impact of this vulnerability is a denial of service condition on MySQL Server and MySQL Cluster, causing the server to hang or crash repeatedly. There is no impact on confidentiality or integrity. The attack requires high privileges and network access via multiple protocols. This could disrupt database availability for affected versions.

The vendor advisory does not explicitly state a patch or remediation level for this vulnerability. Oracle strongly recommends that customers apply the latest Critical Patch Updates without delay to mitigate vulnerabilities. Users of affected versions 9.7.0 through 9.7.1 should monitor Oracle's security alerts and apply any available patches promptly. Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance.