Threats affecting pkg:rpm/oracle/mysql-server

CVE-2026-101803 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to compromise the server. Exploitation can lead to unauthorized creation, deletion, or modification of critical data and cause denial of service through server hangs or crashes. The CVSS 3.1 base score is 6.5, indicating a medium severity with impacts on integrity and availability. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.

CVE-2026-101801 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9 (medium severity). Oracle has released patches for this vulnerability as part of their October 2026 Critical Patch Update.

CVE-2026-101800 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access to potentially create, delete, or modify critical data. The vulnerability is difficult to exploit and impacts confidentiality and integrity but does not affect availability. The CVSS 3.1 base score is 6.8, indicating a medium severity level. Oracle has released patches for affected products as part of their October 2026 Critical Patch Update.

CVE-2026-101798 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has included this fix in their October 2026 Critical Patch Update, which addresses numerous vulnerabilities across Oracle products.

CVE-2026-101796 is a high-severity vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows an unauthenticated attacker with network access to potentially take over the server or cluster, but exploitation requires human interaction from a user other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.5. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, strongly recommending patch application.

A vulnerability in Oracle MySQL Server and MySQL Cluster allows an unauthenticated attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The flaw affects multiple versions of MySQL Server and MySQL Cluster. The vulnerability is difficult to exploit and does not allow data confidentiality or integrity compromise. The CVSS 3.1 base score is 5.9, reflecting a medium severity with impact on availability only.

CVE-2026-101786 is a high-severity vulnerability in Oracle MySQL Server and MySQL Cluster versions 26.7.0 and 26.7.1. It allows a high privileged attacker with network access via multiple protocols to compromise the affected MySQL products. Successful exploitation can lead to complete takeover of the MySQL Server or Cluster, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 7.2. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches for multiple products including MySQL. However, explicit patch availability for this specific vulnerability is not confirmed in the advisory content provided.

A high-severity vulnerability exists in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running MySQL to compromise the server. The vulnerability impacts confidentiality, integrity, and availability, potentially leading to full takeover of the MySQL Server or Cluster.

CVE-2026-101778 is a vulnerability in Oracle MySQL Server and MySQL Cluster that allows a low privileged attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The vulnerability affects multiple supported versions of MySQL Server and MySQL Cluster. The impact is limited to availability, with no confidentiality or integrity loss reported. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Oracle has released security patches for this vulnerability as part of its October 2026 Critical Patch Update.

CVE-2026-101774 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows an unauthenticated attacker with network access to cause denial of service (server hang or crash) and unauthorized modification (update, insert, delete) of some accessible data. The vulnerability is difficult to exploit and requires high attack complexity. The CVSS 3.1 base score is 6.5, indicating a medium severity with integrity and availability impacts.

CVE-2026-101770 is a high-severity vulnerability in Oracle MySQL Server and MySQL Cluster client programs affecting multiple versions. It allows an unauthenticated attacker with network access to potentially take over the affected MySQL Server or Cluster. The vulnerability is difficult to exploit and impacts confidentiality, integrity, and availability. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities, strongly recommending patch application.

CVE-2026-101766 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or repeatedly crashing the server. The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains patches for many vulnerabilities including this one.

CVE-2026-101762 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities.

CVE-2026-101761 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows an unauthenticated attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The vulnerability is difficult to exploit and requires high attack complexity. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities.

CVE-2026-101756 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity.

A vulnerability in Oracle MySQL Server and MySQL Cluster allows a high privileged attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The flaw affects multiple versions of MySQL Server and MySQL Cluster. The vulnerability is difficult to exploit and does not impact confidentiality or integrity, only availability. Oracle has released patches as part of their October 2026 Critical Patch Update.

CVE-2026-101753 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions 9.7.0 through 9.7.3 and 26.7.0 through 26.7.1. It allows a high privileged attacker with network access to cause a denial of service (DoS) by hanging or crashing the server. The vulnerability is difficult to exploit and does not impact confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating a medium severity focused on availability impact.

CVE-2026-101750 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products.

CVE-2026-101749 is a vulnerability in Oracle MySQL Server and MySQL Cluster versions 26.7.0 and 26.7.1. It allows a high privileged attacker with network access to cause a denial of service by hanging or crashing the server. The vulnerability affects availability but does not impact confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity.

CVE-2026-101747 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has released patches as part of their October 2026 Critical Patch Update.