MySQL Server vulnerabilities
122 known CVE vulnerabilities in MySQL Server, translated and rated.
- CVE-2026-101771High
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.
- CVE-2026-101770High
Vulnerability in MySQL Server and MySQL Cluster (component: Client programs) affecting versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49. A difficult-to-exploit flaw allows an unauthenticated attacker with network access to take over the MySQL server.
- CVE-2026-101766Medium
Vulnerability in MySQL Server and MySQL Cluster (component Server: Replication) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A difficult-to-exploit network attack by a high-privileged user can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101762Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Security: Encryption component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a low-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101761Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Security: Encryption component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows an unauthenticated network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101760Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101756Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: GIS component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101755Medium
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. Difficult to exploit, allows a low-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101754Medium
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101753Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: RAPID component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101752Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101751Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-101732Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101731Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101730Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101729Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Replication component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101728Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Pluggable Auth component. An authenticated low-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101727Medium
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Replication component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
- CVE-2026-101726Medium
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
- CVE-2026-101725Medium
Vulnerability in MySQL Server and MySQL Cluster (C API component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (Availability impacts).
- CVE-2026-101724Medium
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
- CVE-2026-101722Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3 and 26.7.0-26.7.1. A low privileged attacker with network access can gain unauthorized read access to a subset of data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).
- CVE-2026-101721Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high privileged attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (Availability impacts).
- CVE-2026-101720Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Connection Handling component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. An unauthenticated attacker with network access can perform unauthorized update, insert or delete access to some data. CVSS 3.1 Base Score 5.3 (Integrity impacts).
- CVE-2026-101679High
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. An easily exploitable network attack allows an unauthenticated attacker to cause a hang or repeatable crash (DoS). CVSS 7.5.
- CVE-2026-61144Medium
Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster (component: Server: Optimizer). Affected versions are MySQL Server 9.7.0-9.7.1 and MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server.
- CVE-2026-61128Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) allows a high-privileged attacker to cause a hang or frequent crash (DOS) over the network. Network access and multiple protocols are required.
- CVE-2026-61108Medium
MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 have a vulnerability in the GIS component allowing a low-privileged attacker to remotely cause a hang or frequent crash (full DoS).
- CVE-2026-61096Low
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Pluggable Auth) in specified versions. Difficult to exploit, unauthenticated attacker with local logon can modify data.
- CVE-2026-61094High
Vulnerability in MySQL Server and MySQL Cluster (Oracle MySQL) allows a high-privileged attacker with network access via multiple protocols to take over the server. Affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1.
- CVE-2026-60315High
Vulnerability in MySQL Server and MySQL Cluster (component: Server: X Plugin) in multiple versions. It is easy to exploit, requires no authentication and network access. Successful attack can cause hang or frequent crashes (complete denial of service) and unauthorized read access to some data.
- CVE-2026-60191Medium
MySQL Server (versions 8.4.0-8.4.10, 9.7.0-9.7.1) and MySQL Cluster (versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1) have a vulnerability in the Server: Replication component. A privileged attacker with local access can cause a hang or frequent crashes (complete DOS).
- CVE-2026-60189Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is difficult, requires network access via multiple protocols.
- CVE-2026-60183Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can take over the server or cluster. Exploitation is difficult.
- CVE-2026-60181Medium
Difficult-to-exploit vulnerability in MySQL Server and MySQL Cluster, requiring user interaction. A low-privileged attacker with logon access can take over the server.
- CVE-2026-60178Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Clone Plugin component) in versions: MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Difficult to exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to take over MySQL Server and MySQL Cluster.
- CVE-2026-47052Medium
Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster products (component: InnoDB). Affected versions include MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server or cluster.
- CVE-2026-47023Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
- CVE-2026-47008Medium
Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
- CVE-2026-35240Medium
A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-35239Medium
A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-35238Medium
A vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-35237Medium
Vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A high-privileged attacker with network access can easily exploit it to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-35236Medium
Vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A high-privileged attacker with network access can easily exploit it to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-35235Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS) affecting versions 9.0.0-9.6.0. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).
- CVE-2026-35234Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition) affecting versions 9.0.0-9.6.0. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).
- CVE-2026-34308Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-34304Medium
A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
- CVE-2026-34303Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-34293Medium
A vulnerability in Oracle MySQL Server (Server: DML component) affects versions 8.0.0-8.0.45. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS