MySQL vulnerabilities

Latest MySQL CVEs

Newest publication first · page 3 of 40 · showing the latest 1,000

1. CVE-2026-114509 Laravel TokenGuard authentication bypass through non-string API credentials

   Published 2026-10-21

   Critical·CVSS 9.2 EPSS 1.8%

   Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended exist...

2. CVE-2026-90484 Apache bRPC: Null pointer dereference in MySQL reply parser leading to client crash

   Published 2026-10-21

   Medium·CVSS 6.5 EPSS 0.38%

   The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check (is_full_package), after which the parser re...

3. CVE-2026-83404 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated a...

   Published 2026-10-20

   High·CVSS 7.5 EPSS 0.39%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connector...

4. CVE-2026-101810 Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attack...

   Published 2026-10-20

   High·CVSS 7.5 EPSS 0.49%

   Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Router. Succes...

5. CVE-2026-101806 mysql-connector-odbc: MySQL Connector/ODBC: Unauthorized data access and modification

   Published 2026-10-20

   Medium·CVSS 6.8 EPSS 0.27%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

6. CVE-2026-101804 mysql-connector-odbc: MySQL Connector/ODBC: Partial denial of service

   Published 2026-10-20

   Low·CVSS 2.5 EPSS 0.11%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to comp...

7. CVE-2026-101802 mysql: mysql: Denial of Service via the Server Parser

   Published 2026-10-20

   Medium·CVSS 6.5 EPSS 0.35%

   Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

8. CVE-2026-101803 mysql: mysql: unauthorized data modification via XML component

   Published 2026-10-20

   Medium·CVSS 6.5 EPSS 0.39%

   Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exp...

9. CVE-2026-101801 mysql: mysql: Denial of Service in Server Optimizer

   Published 2026-10-20

   Medium·CVSS 4.9 EPSS 0.39%

   Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

10. CVE-2026-101800 mysql: mysql: unauthorized data access via improper privilege controls

    Published 2026-10-20

    Medium·CVSS 6.8 EPSS 0.26%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-2...

11. CVE-2026-101798 mysql: mysql: Denial of Service in the server optimizer

    Published 2026-10-20

    Medium·CVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

12. CVE-2026-101799 mysql: mysql: Denial of Service via Group Replication GCS

    Published 2026-10-20

    Medium·CVSS 6.5 EPSS 0.22%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-...

13. CVE-2026-101795 mysql: mysql: Complete service compromise by a local privileged attacker

    Published 2026-10-20

    Medium·CVSS 6.7 EPSS 0.15%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26...

14. CVE-2026-101796 mysql: mysql: Complete server takeover via replication component

    Published 2026-10-20

    High·CVSS 7.5 EPSS 0.29%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Di...

15. CVE-2026-101797 mysql: mysql: system takeover via mysqldump component

    Published 2026-10-20

    High·CVSS 7.5 EPSS 0.29%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diff...

16. CVE-2026-101794 mysql: mysql: Denial of Service via XML component flaw

    Published 2026-10-20

    Medium·CVSS 6.5 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exp...

17. CVE-2026-101788 mysql: mysql: Denial of Service via Server Components Services

    Published 2026-10-20

    Medium·CVSS 5.9 EPSS 0.33%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26...

18. CVE-2026-101789 mysql: mysql: Denial of Service via the Optimizer component

    Published 2026-10-20

    Medium·CVSS 6.5 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

19. CVE-2026-101785 mysql: MySQL: Unauthorized data modification in JSON component

    Published 2026-10-20

    High·CVSS 8.3 EPSS 0.34%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily ex...

20. CVE-2026-101786 mysql: mysql: Server takeover by a privileged network attacker

    Published 2026-10-20

    High·CVSS 7.2 EPSS 0.43%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with netwo...

21. CVE-2026-101787 mysql: mysql: Denial of Service via Server Optimizer flaw

    Published 2026-10-20

    Medium·CVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

22. CVE-2026-101783 Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated atta...

    Published 2026-10-20

    High·CVSS 7.4 EPSS 0.30%

    Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise MySQL Router. Successful attack...

23. CVE-2026-101784 mysql: mysql: Denial of service in query optimizer

    Published 2026-10-20

    Medium·CVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

24. CVE-2026-101781 mysql: mysql: Server takeover via Group Replication GCS

    Published 2026-10-20

    High·CVSS 8.8 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-...

25. CVE-2026-101780 mysql: mysql: Denial of Service via X Plugin

    Published 2026-10-20

    Medium·CVSS 6.5 EPSS 0.36%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.