CVE-2026-101794 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is classified with medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which addresses numerous security flaws across various Oracle products. The advisory strongly recommends applying available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101789 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is classified as medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across its product portfolio. Users are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101788 is a medium severity vulnerability affecting multiple versions of MySQL Server and MySQL Cluster, including versions 5.5.32 through 5.5.57 on Ubuntu 14.04. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101787 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu-packaged versions of MySQL 5.5. Oracle has released security patches addressing this vulnerability as part of their October 2026 Critical Patch Update. There are no known exploits in the wild at this time.
CVE-2026-101785 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific MySQL 5.5 versions used in Ubuntu distributions. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products including MySQL. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101784 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the server optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is rated with medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across its product portfolio. There are no known exploits in the wild for this vulnerability at this time.
CVE-2026-101781 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication GCS component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu-packaged MySQL 5.5 versions. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101780 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server: X Plugin component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is listed with medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101779 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically impacting telemetry components. It affects certain versions of MySQL including 8.4 and 9.7 series. The vulnerability was published on October 26, 2026, and is classified with medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across multiple Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101778 is a security vulnerability affecting MySQL Server and MySQL Cluster components. It impacts specific versions of MySQL 5.5 as well as MySQL 8.0, 8.4, and 9.7. The vulnerability is included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate this vulnerability.
CVE-2026-101777 is a security vulnerability affecting MySQL Server and MySQL Cluster related to encryption. It impacts specific versions of MySQL 5.5 as listed. The vulnerability is addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches across Oracle products. Oracle strongly recommends applying these patches promptly to mitigate risks. No public exploit or in-the-wild exploitation has been reported for this vulnerability.
CVE-2026-101776 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication Plugin. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability was publicly disclosed in October 2026 and is classified with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products. There is no indication of known exploits in the wild. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101775 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the replication component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 14.04 LTS MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products.
CVE-2026-101774 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Pluggable Authentication component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain MySQL 5.5 versions on Ubuntu. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. The vulnerability is classified as medium severity. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the provided security patches promptly to mitigate the risk.
CVE-2026-101773 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication Plugin. It impacts MySQL versions 8.0, 8.4, and 9.7, as well as multiple Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security fixes across Oracle products. There are no known exploits in the wild at this time.
CVE-2026-101772 is a security vulnerability affecting MySQL Server and MySQL Cluster client programs, including versions 8.0, 8.4, and 9.7. It is part of a large Critical Patch Update released by Oracle in October 2026, which addresses numerous security issues across multiple Oracle products. The vulnerability has been assigned a medium severity level. There is no public CVSS score or detailed technical exploit information available. Oracle strongly recommends applying the provided security patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101771 is a security vulnerability affecting MySQL Server and MySQL Cluster client programs, including versions 8.0, 8.4, and 9.7. The vulnerability is included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit code or active exploitation in the wild has been reported. Oracle strongly recommends applying the provided security patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101770 is a security vulnerability affecting MySQL Server and MySQL Cluster client programs, including versions 8.0, 8.4, and 9.7. The vulnerability is addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches across Oracle products. The advisory emphasizes the importance of applying available patches promptly to mitigate exploitation risks. No public exploit code or in-the-wild exploitation has been reported for this vulnerability. The severity is assessed as medium based on the available information.
A high-severity vulnerability (CVE-2026-101768) affects specific versions of the MySQL Connectors product in Oracle MySQL 5.5. This vulnerability has a CVSS 3.1 score of 8.1, indicating a network exploitable flaw requiring high attack complexity with no privileges or user interaction needed. The impact includes high confidentiality, integrity, and availability losses. The affected versions are specific Ubuntu-packaged builds of MySQL 5.5. No public exploits or patches are currently documented.
CVE-2026-101766 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically impacting the replication component. It affects multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is classified with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across various Oracle products. There are no known exploits in the wild reported at this time.