This vulnerability in the Server: Optimizer component of Oracle MySQL Server and MySQL Cluster versions 9.7.0 to 9.7.1 allows an attacker with low privileges and network access to cause a hang or repeated crash, resulting in a denial of service. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). Oracle's July 2026 Critical Patch Update advisory includes patches for affected MySQL versions, though no direct patch link or remediation level is specified in the provided data. Oracle recommends applying patches without delay to mitigate such vulnerabilities.

Successful exploitation results in denial of service by causing the MySQL Server or MySQL Cluster to hang or crash repeatedly. There is no impact on confidentiality or integrity. The attack requires low privileges and network access, making it relatively easy to exploit. No known exploits in the wild have been reported to date.

Oracle's July 2026 Critical Patch Update advisory includes security patches addressing this vulnerability for affected MySQL versions. Although no explicit patch link or remediation level is provided in the input data, Oracle strongly recommends applying the available security patches promptly to mitigate this vulnerability. Users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for detailed patch availability and installation instructions.