Skip to content

Technology

MySQL vulnerabilities

Oracle MySQL server, connectors and clients. 2,873 published CVES affecting MySQL, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2,873
Critical
200
High
504
Medium
1,825
Low
249
Unscored
95
CISA KEV
8
Atom feed of MySQL alerts

Latest MySQL CVEs

Newest publication first · page 4 of 40 · showing the latest 1,000

  1. CVE-2026-101779 mysql: mysql: Partial Denial of Service via Telemetry component

    Published
    LowCVSS 2.7 EPSS 0.28%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

  2. CVE-2026-101777 mysql: mysql: Denial of Service via security encryption component

    Published
    MediumCVSS 5.5 EPSS 0.37%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability al...

  3. CVE-2026-101778 mysql: mysql: Denial of Service

    Published
    MediumCVSS 6.5 EPSS 0.36%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26...

  6. CVE-2026-101776 mysql: mysql: Denial of Service in Group Replication plugin

    Published
    MediumCVSS 4.9 EPSS 0.30%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7...

  7. CVE-2026-101771 mysql: mysql: complete service takeover via network access

    Published
    HighCVSS 8.1 EPSS 0.41%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diffic...

  8. CVE-2026-101773 mysql: MySQL: Denial of Service via the Group Replication plugin

    Published
    HighCVSS 7.1 EPSS 0.30%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7...

  9. CVE-2026-101772 mysql: mysql: unauthorized server takeover

    Published
    HighCVSS 8.1 EPSS 0.41%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diffic...

  10. CVE-2026-101769 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthentica...

    Published
    HighCVSS 7.0 EPSS 0.28%

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise MySQL Cluster. Successful...

  11. CVE-2026-101770 mysql: mysql: System takeover via client programs

    Published
    HighCVSS 8.1 EPSS 0.44%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diffic...

  12. CVE-2026-101766 mysql: mysql: Denial of service in replication component

    Published
    MediumCVSS 4.4 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Di...

  14. CVE-2026-101761 mysql: mysql: Denial of Service via security encryption component

    Published
    MediumCVSS 5.9 EPSS 0.34%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-2...

  15. CVE-2026-101762 mysql: mysql: Denial of Service via security encryption component

    Published
    MediumCVSS 5.3 EPSS 0.31%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-2...

  16. CVE-2026-101760 mysql: mysql: Denial of service in InnoDB

    Published
    MediumCVSS 4.9 EPSS 0.38%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploita...

  17. CVE-2026-101756 mysql: mysql: Denial of Service via GIS component

    Published
    MediumCVSS 4.9 EPSS 0.44%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privile...

  18. CVE-2026-101755 mysql: mysql: Denial of Service via client programs

    Published
    MediumCVSS 5.3 EPSS 0.31%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with networ...

  19. CVE-2026-101754 mysql: mysql: Denial of Service via client programs

    Published
    MediumCVSS 4.4 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diffic...

  20. CVE-2026-101753 mysql: mysql: Denial of Service in RAPID component

    Published
    MediumCVSS 4.4 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows high pri...

  21. CVE-2026-101752 mysql: mysql: Denial of Service in Server: Components Services

    Published
    MediumCVSS 4.4 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability a...

  22. CVE-2026-101749 mysql: mysql: Denial of Service via security encryption component

    Published
    MediumCVSS 4.9 EPSS 0.44%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker...

  23. CVE-2026-101750 mysql: mysql: Denial of Service in Clone Plugin

    Published
    MediumCVSS 4.9 EPSS 0.44%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. E...

  24. CVE-2026-101751 mysql: mysql: Denial of Service in Group Replication

    Published
    MediumCVSS 4.9 EPSS 0.44%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-...

  25. CVE-2026-101747 mysql: mysql: Denial of Service in InnoDB

    Published
    MediumCVSS 6.5 EPSS 0.40%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploita...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.