DBI versions before 1.656 for Perl contain a vulnerability causing a crash via type confusion in the dbi_profile feature when a database handle is destroyed under a Profile Path containing an {attr} element. This occurs because the code expects a reference to the inner handle but receives the inner hash itself during destruction, leading to invalid memory dereference and process termination with SIGSEGV. The Profile Path can be set by the application, the Profile handle attribute, or the DBI_PROFILE environment variable, allowing unmodified programs to be crashed by setting DBI_PROFILE accordingly.
A medium severity vulnerability (CVE-2026-101806) affects specific versions of MySQL 5.5 connectors in Oracle MySQL. The flaw allows an attacker with low privileges to cause high impact on confidentiality and integrity without user interaction. The vulnerability is network exploitable but requires high attack complexity. No known exploits are reported in the wild.
A low severity vulnerability exists in the MySQL Connectors component of Oracle MySQL 5.5, affecting multiple specific Ubuntu package versions. The vulnerability has a CVSS 3.1 base score of 2.5, indicating low impact primarily on availability with no confidentiality or integrity impact. It requires local attack vector with high attack complexity and no privileges, and user interaction is needed. No known exploits are reported in the wild. The affected versions are specific Ubuntu builds of MySQL 5.5. No patch or remediation information is provided in the data.
CVE-2026-101803 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability is classified as medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which contains numerous security patches across many products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101802 is a vulnerability affecting MySQL Server and MySQL Cluster, specifically in the server parser component. It impacts multiple versions including MySQL 8.0, 8.4, and 9.7, as well as various Ubuntu 5.5 builds. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many products. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101801 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple versions of MySQL including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many Oracle products. Oracle strongly recommends applying the available security patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101800 is a security vulnerability affecting MySQL Server and MySQL Cluster related to security privileges. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific MySQL 5.5 builds on Ubuntu. The vulnerability was publicly disclosed in October 2026 and is categorized as medium severity. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. There are no known exploits in the wild for this vulnerability at this time.
CVE-2026-101799 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication GCS component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has released a Critical Patch Update in October 2026 that includes fixes for this and many other vulnerabilities across various Oracle products, including MySQL. Users are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101798 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically in the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 14.04-specific MySQL 5.5 builds. The vulnerability was published on October 26, 2026, and is classified as medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous patches for multiple products. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101797 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, including the mysqldump client. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly to mitigate risk.
CVE-2026-101796 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically in the replication component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 14.04 LTS MySQL 5.5 builds. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate this vulnerability.
CVE-2026-101795 is a security vulnerability affecting MySQL Server and MySQL Cluster components, including versions 8.0, 8.4, and 9.7. The vulnerability is publicly known and classified with medium severity. It is included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across multiple Oracle products. No public exploit code or in-the-wild exploitation has been reported for this vulnerability. Oracle strongly recommends applying the provided security patches promptly to mitigate potential risks.
CVE-2026-101794 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is classified with medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which addresses numerous security flaws across various Oracle products. The advisory strongly recommends applying available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101789 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is classified as medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across its product portfolio. Users are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101788 is a medium severity vulnerability affecting multiple versions of MySQL Server and MySQL Cluster, including versions 5.5.32 through 5.5.57 on Ubuntu 14.04. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101787 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu-packaged versions of MySQL 5.5. Oracle has released security patches addressing this vulnerability as part of their October 2026 Critical Patch Update. There are no known exploits in the wild at this time.
CVE-2026-101785 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific MySQL 5.5 versions used in Ubuntu distributions. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products including MySQL. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101784 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the server optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is rated with medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across its product portfolio. There are no known exploits in the wild for this vulnerability at this time.
CVE-2026-101781 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication GCS component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu-packaged MySQL 5.5 versions. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101780 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server: X Plugin component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is listed with medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.