CVE-2026-101627 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) in versions 8.0, 8.4, and 9.7. It is included in Oracle's October 2026 Critical Patch Update, which addresses multiple security issues across Oracle products. The vulnerability is rated medium severity. There are no known exploits in the wild at this time. Oracle strongly recommends applying the available security patches promptly to mitigate this and other vulnerabilities.
A medium severity vulnerability (CVE-2026-101626) affects specific versions of MySQL 5.5 connectors. The flaw allows a network attacker with high attack complexity and no privileges or user interaction to cause a confidentiality breach, impacting data confidentiality but not integrity or availability. The vulnerability was published on October 23, 2026, and affects multiple Ubuntu-packaged versions of MySQL 5.5. No known exploits are reported in the wild, and no patch information is provided in the source data.
A medium severity vulnerability (CVE-2026-101625) affects specific versions of the MySQL Connectors product in Oracle MySQL 5.5. The flaw allows an attacker to cause limited impact, specifically a partial confidentiality loss, without affecting integrity or availability. The vulnerability requires network access, no privileges, and user interaction to exploit.
CVE-2026-101624 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) in versions 8.0, 8.4, and 9.7. It is included in Oracle's October 2026 Critical Patch Update, which addresses multiple security issues across Oracle products. The vulnerability has been assigned a medium severity level. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101623 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 5.5 package versions. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across its product portfolio.
CVE-2026-101622 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. The vulnerability is listed with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across multiple products. The advisory emphasizes the importance of applying available patches promptly to avoid exploitation. There is no indication of known exploits in the wild for this vulnerability at this time.
CVE-2026-101621 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) in versions 8.0, 8.4, and 9.7. It is included in Oracle's October 2026 Critical Patch Update, which addresses multiple security issues across Oracle products. The vulnerability is rated medium severity. There is no public CVSS score or detailed technical exploit information available. Oracle strongly recommends applying the provided security patches promptly to mitigate risks.
CVE-2026-101620 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server Optimizer component. It impacts MySQL version 9.7 and various Ubuntu 14.04 LTS package versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. The vulnerability is rated as medium severity. No public exploit or active exploitation in the wild has been reported. Oracle strongly recommends applying the available security patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101619 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) in versions 8.0, 8.4, and 9.7. It is included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. The vulnerability has been publicly disclosed but lacks a CVSS score and no known exploits in the wild have been reported. Oracle strongly recommends applying the available security patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101618 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101617 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the provided patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101616 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many products.
CVE-2026-101615 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released in Oracle's October 2026 Critical Patch Update. No specific technical details or exploitation methods are provided. Oracle strongly recommends applying available patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101614 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101613 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to Data Definition Language (DDL) operations. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101612 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) across multiple versions including MySQL 8.0, 8.4, and 9.7. The vulnerability is recognized and addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches for Oracle products. The advisory emphasizes the importance of applying these patches promptly to mitigate exploitation risks. There is no public exploit code or confirmed exploitation in the wild reported for this vulnerability.
CVE-2026-101611 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) products, including versions 8.0, 8.4, and 9.7. The vulnerability is publicly known and has been addressed by Oracle in their October 2026 Critical Patch Update, which includes numerous security patches across multiple Oracle products. There is no public exploit code or reports of exploitation in the wild for this vulnerability. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101610 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which provides security patches for affected products.
CVE-2026-101609 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. The advisory emphasizes the importance of applying available patches promptly to mitigate exploitation risks.
CVE-2026-101608 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.