Skip to content

Product

oracle MySQL vulnerabilities

1,688 published CVES affecting oracle MySQL, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1,688
Critical
9
High
105
Medium
1,378
Low
196
Unscored
0
CISA KEV
0

Latest oracle MySQL CVEs

Newest publication first · page 1 of 40 · showing the latest 1,000

  1. CVE-2026-101802 mysql: mysql: Denial of Service via the Server Parser

    Published
    MediumCVSS 6.5 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

  2. CVE-2026-101803 mysql: mysql: unauthorized data modification via XML component

    Published
    MediumCVSS 6.5 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exp...

  3. CVE-2026-101801 mysql: mysql: Denial of Service in Server Optimizer

    Published
    MediumCVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

  5. CVE-2026-101798 mysql: mysql: Denial of Service in the server optimizer

    Published
    MediumCVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

  6. CVE-2026-101799 mysql: mysql: Denial of Service via Group Replication GCS

    Published
    MediumCVSS 6.5 EPSS 0.22%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-...

  8. CVE-2026-101796 mysql: mysql: Complete server takeover via replication component

    Published
    HighCVSS 7.5 EPSS 0.29%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Di...

  9. CVE-2026-101797 mysql: mysql: system takeover via mysqldump component

    Published
    HighCVSS 7.5 EPSS 0.29%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diff...

  10. CVE-2026-101794 mysql: mysql: Denial of Service via XML component flaw

    Published
    MediumCVSS 6.5 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exp...

  11. CVE-2026-101788 mysql: mysql: Denial of Service via Server Components Services

    Published
    MediumCVSS 5.9 EPSS 0.33%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26...

  12. CVE-2026-101789 mysql: mysql: Denial of Service via the Optimizer component

    Published
    MediumCVSS 6.5 EPSS 0.35%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

  13. CVE-2026-101785 mysql: MySQL: Unauthorized data modification in JSON component

    Published
    HighCVSS 8.3 EPSS 0.34%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily ex...

  14. CVE-2026-101786 mysql: mysql: Server takeover by a privileged network attacker

    Published
    HighCVSS 7.2 EPSS 0.43%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with netwo...

  15. CVE-2026-101787 mysql: mysql: Denial of Service via Server Optimizer flaw

    Published
    MediumCVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

  16. CVE-2026-101784 mysql: mysql: Denial of service in query optimizer

    Published
    MediumCVSS 4.9 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easi...

  17. CVE-2026-101781 mysql: mysql: Server takeover via Group Replication GCS

    Published
    HighCVSS 8.8 EPSS 0.39%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-...

  18. CVE-2026-101780 mysql: mysql: Denial of Service via X Plugin

    Published
    MediumCVSS 6.5 EPSS 0.36%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easil...

  19. CVE-2026-101779 mysql: mysql: Partial Denial of Service via Telemetry component

    Published
    LowCVSS 2.7 EPSS 0.28%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

  20. CVE-2026-101777 mysql: mysql: Denial of Service via security encryption component

    Published
    MediumCVSS 5.5 EPSS 0.37%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability al...

  21. CVE-2026-101778 mysql: mysql: Denial of Service

    Published
    MediumCVSS 6.5 EPSS 0.36%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26...

  24. CVE-2026-101776 mysql: mysql: Denial of Service in Group Replication plugin

    Published
    MediumCVSS 4.9 EPSS 0.30%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7...

  25. CVE-2026-101771 mysql: mysql: complete service takeover via network access

    Published
    HighCVSS 8.1 EPSS 0.41%

    Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Diffic...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.