CVE-2026-101628 is a vulnerability in Oracle MySQL Cluster 9.7.3 that allows a low privileged attacker with network access via HTTP to cause a denial of service by hanging or crashing the MySQL Cluster. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains patches for multiple products including MySQL Cluster. However, no explicit patch link or fixed version is provided in the input data.
CVE-2026-101513 is a vulnerability in Oracle MySQL Cluster (InnoDB component) affecting versions 8.0.0 through 8.0.37. It requires physical access and is difficult to exploit. Successful exploitation can cause a hang or repeated crashes, resulting in a complete denial of service (DoS). The CVSS 3.1 base score is 3.8, indicating a low severity impact focused on availability. Oracle has released security patches addressing this and many other vulnerabilities in their October 2026 Critical Patch Update.
CVE-2026-70724 is a high-severity vulnerability in Oracle MySQL Cluster affecting versions 8.0.0 through 8.0.48, 8.4.0 through 8.4.11, and 9.7.0 through 9.7.2. It allows an unauthenticated attacker with network access via HTTP to potentially take over the MySQL Cluster. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability of the affected systems.
CVE-2026-60592 is a high-severity vulnerability in Oracle MySQL Cluster affecting versions 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. It allows an unauthenticated attacker with network access via multiple protocols to cause denial of service by hanging or crashing the cluster and to perform unauthorized update, insert, or delete operations on accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant integrity and availability impacts. Oracle has released patches addressing this vulnerability in later versions, and customers are strongly advised to apply these updates promptly.
CVE-2026-60190 is a low-severity vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with network access via multiple protocols to cause a partial denial of service (partial DOS). The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle has released a Critical Patch Update advisory covering this vulnerability, but the specific patch status for this CVE is not explicitly confirmed in the advisory. Users should consult the Oracle advisory for the latest patch information and apply updates promptly.
CVE-2026-60171 is a vulnerability in Oracle MySQL Cluster versions 8.0.0 through 8.0.47 affecting the Server Optimizer component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the MySQL Cluster. The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity impact focused on availability. No confirmed patch or official remediation guidance is explicitly stated in the advisory, but Oracle strongly recommends applying Critical Patch Updates promptly. There are no known exploits in the wild at this time.
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).