Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-101751 EUVD-2026-106152GHSA-82xv-65m4-vwc2

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions tha…

Published Oct 20, 2026 · Updated Oct 22, 2026 · Assigned by oracle

Vendor: Oracle Product: MySQL Cluster Product: MySQL Server Package: mariadb Package: mariadb-10.0 Package: mariadb-10.1 Package: mariadb-10.3 Package: mariadb-10.6 Package: mysql-5.5 Package: mysql-5.7 Package: mysql-8.0 Package: mysql-8.4 Package: mysql-9.7 Package: percona-server-5.6 Package: percona-xtradb-cluster-5.6 Ecosystem: Ubuntu

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

VendorProductAffectedFixed
Oracle MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 —
Oracle MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 mariadb +1 No fix yet —
Ubuntu 26.04 LTS mariadb +1 No fix yet —
Ubuntu 24.04 LTS mariadb +1 No fix yet —
Ubuntu 22.04 LTS mysql-8.0 +1 No fix yet —
Ubuntu 20.04 LTS mariadb-10.3 No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS mariadb-10.1 No fix yet —
Ubuntu 16.04 LTS mariadb-10.0 +2 No fix yet —
Ubuntu 14.04 LTS mysql-5.5 No fix yet —
Ubuntu Pro 20.04 LTS mysql-8.0 No fix yet —
Ubuntu Pro 18.04 LTS mysql-5.7 No fix yet —
Ubuntu Pro 16.04 LTS mysql-5.7 No fix yet —

Advisories 1

References