Bug#1151663: marked as done (mysql-9.7: CVE-2026-101607 CVE-2026-101608 CVE-2026-101609 CVE-2026-101610 CVE-2026-101611 CVE-2026-101612 CVE-2026-101613 CVE-2026-101614 CVE-2026-101615 CVE-2026-101616 CVE-2026-101617 CVE-2026-101618 CVE-2026-101619 CVE-2026-101620 CVE-2026-101621 CVE-2026-101622 CVE-2026-101623 CVE-2026-101624 CVE-2026-101627 CVE-2026-101629 CVE-2026-101637 CVE-2026-101679 CVE-2026-101721 CVE-2026-101722 CVE-2026-101724 CVE-2026-101725 CVE-2026-101726 CVE-2026-101727 CVE-2026-101728 CVE-2026-101729 CVE-2026-101730 CVE-2026-101731 CVE-2026-101732 CVE-2026-101733 CVE-2026-101747 CVE-2026-101748 CVE-2026-101750 CVE-2026-101751 CVE-2026-101752 CVE-2026-101753 CVE-2026-101754 CVE-2026-101756 CVE-2026-101760 CVE-2026-101761 CVE-2026-101762 CVE-2026-101766 CVE-2026-101770 CVE-2026-101771 CVE-2026-101772 CVE-2026-101773 CVE-2026-101774 CVE-2026-101775 CVE-2026-101776 CVE-2026-101777 CVE-2026-101778 CVE-2026-101779 CVE-2026-101780 CVE-2026-101781 CVE-2026-101784 CVE-2026-101785 CVE-2026-101787 CVE-2026-101788 CVE-2026-101789 CVE-2026-101794 CVE-2026-101795 CVE-2026-101796 CVE-2026-101797 CVE-2026-101798 CVE-2026-101799 CVE-2026-101800 CVE-2026-101801 CVE-2026-101802 CVE-2026-101803)

[Debian Bug Tracking System]

Your message dated Fri, 23 Oct 2026 03:20:29 +0000
with message-id <e1xk5pv-00000000eud-0...@fasolo.debian.org>
and subject line Bug#1151663: fixed in mysql-9.7 9.7.4-1
has caused the Debian Bug report #1151663,
regarding mysql-9.7: CVE-2026-101607 CVE-2026-101608 CVE-2026-101609 
CVE-2026-101610 CVE-2026-101611 CVE-2026-101612 CVE-2026-101613 CVE-2026-101614 
CVE-2026-101615 CVE-2026-101616 CVE-2026-101617 CVE-2026-101618 CVE-2026-101619 
CVE-2026-101620 CVE-2026-101621 CVE-2026-101622 CVE-2026-101623 CVE-2026-101624 
CVE-2026-101627 CVE-2026-101629 CVE-2026-101637 CVE-2026-101679 CVE-2026-101721 
CVE-2026-101722 CVE-2026-101724 CVE-2026-101725 CVE-2026-101726 CVE-2026-101727 
CVE-2026-101728 CVE-2026-101729 CVE-2026-101730 CVE-2026-101731 CVE-2026-101732 
CVE-2026-101733 CVE-2026-101747 CVE-2026-101748 CVE-2026-101750 CVE-2026-101751 
CVE-2026-101752 CVE-2026-101753 CVE-2026-101754 CVE-2026-101756 CVE-2026-101760 
CVE-2026-101761 CVE-2026-101762 CVE-2026-101766 CVE-2026-101770 CVE-2026-101771 
CVE-2026-101772 CVE-2026-101773 CVE-2026-101774 CVE-2026-101775 CVE-2026-101776 
CVE-2026-101777 CVE-2026-101778 CVE-2026-101779 CVE-2026-101780 CVE-2026-101781 
CVE-2026-101784 CVE-2026-101785 CVE-2026-101787 CVE-2026-101788 CVE-2026-101789 
CVE-2026-101794 CVE-2026-101795 CVE-2026-101796 CVE-2026-101797 CVE-2026-101798 
CVE-2026-101799 CVE-2026-101800 CVE-2026-101801 CVE-2026-101802 CVE-2026-101803
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1151663: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1151663
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

--- Begin Message ---

Source: mysql-9.7
Version: 9.7.2-4
X-Debbugs-CC: t...@security.debian.org
Severity: grave
Tags: security upstream

Hi,

The following vulnerabilities were published for mysql-9.7.

CVE-2026-101607[0]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101608[1]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101609[2]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Difficult to exploit vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101610[3]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101611[4]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Difficult to exploit vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101612[5]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Difficult to exploit vulnerability allows high privileged attacker
| with logon to the infrastructure where MySQL Server, MySQL Cluster
| executes to compromise MySQL Server, MySQL Cluster.  Successful
| attacks require human interaction from a person other than the
| attacker. Successful attacks of this vulnerability can result in
| unauthorized ability to cause a hang or frequently repeatable crash
| (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score
| 4.0 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H).


CVE-2026-101613[6]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: DDL).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101614[7]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101615[8]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with logon to the infrastructure where MySQL Server, MySQL Cluster
| executes to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101616[9]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101617[10]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101618[11]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101619[12]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101620[13]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.3; MySQL Cluster: 9.7.0-9.7.3.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101621[14]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101622[15]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101623[16]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101624[17]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101627[18]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Difficult to exploit vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.4 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101629[19]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3
| and  26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101637[20]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3
| and  26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster as well as  unauthorized update, insert or delete access to
| some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base
| Score 5.5 (Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).


CVE-2026-101679[21]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client programs).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks of
| this vulnerability can result in unauthorized ability to cause a
| hang or frequently repeatable crash (complete DOS) of MySQL Server,
| MySQL Cluster. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101721[22]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Components Services).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows high privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101722[23]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Connection Handling).  Supported versions
| that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows low privileged attacker with network access via
| multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in  unauthorized
| read access to a subset of MySQL Server, MySQL Cluster accessible
| data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).


CVE-2026-101724[24]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101725[25]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: C API).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101726[26]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: C API).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101727[27]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101728[28]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Pluggable Auth).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows low privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101729[29]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101730[30]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101731[31]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101732[32]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101733[33]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101747[34]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows low privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101748[35]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Security: Audit).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows low privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101750[36]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Clone Plugin).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows high privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101751[37]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication GCS).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.12,
| 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49,
| 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101752[38]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Components Services).  Supported versions
| that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101753[39]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: RAPID).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101754[40]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client programs).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101756[41]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: GIS).  Supported versions that are
| affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101760[42]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: InnoDB).  Supported versions that are affected are
| MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL
| Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1.
| Easily exploitable vulnerability allows high privileged attacker
| with network access via multiple protocols to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in unauthorized ability to cause a hang or frequently
| repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS
| 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101761[43]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Security: Encryption).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability
| allows unauthenticated attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 5.9 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101762[44]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Security: Encryption).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability
| allows low privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 5.3 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101766[45]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101770[46]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client programs).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks of
| this vulnerability can result in takeover of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and
| Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-101771[47]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client programs).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks of
| this vulnerability can result in takeover of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and
| Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-101772[48]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client programs).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks of
| this vulnerability can result in takeover of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and
| Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-101773[49]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication Plugin).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.12,
| 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49,
| 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows unauthenticated attacker with access to the
| physical communication segment attached to the hardware where the
| MySQL Server, MySQL Cluster executes to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster as well as
| unauthorized update, insert or delete access to some of MySQL
| Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 7.1
| (Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).


CVE-2026-101774[50]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Pluggable Auth).  Supported versions that
| are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability
| allows unauthenticated attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster as well as  unauthorized update, insert or
| delete access to some of MySQL Server, MySQL Cluster accessible
| data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).
| CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).


CVE-2026-101775[51]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks of
| this vulnerability can result in  unauthorized creation, deletion or
| modification access to critical data or all MySQL Server, MySQL
| Cluster accessible data and unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 7.4 (Integrity and Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H).


CVE-2026-101776[52]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication Plugin).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.12,
| 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49,
| 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9
| (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101777[53]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Security: Encryption).  Supported versions
| that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows high privileged attacker with network access
| via multiple protocols to compromise MySQL Server, MySQL Cluster.
| Successful attacks of this vulnerability can result in unauthorized
| ability to cause a hang or frequently repeatable crash (complete
| DOS) of MySQL Server, MySQL Cluster and  unauthorized read access to
| a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1
| Base Score 5.5 (Confidentiality and Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H).


CVE-2026-101778[54]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Components Services).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows low privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101779[55]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Telemetry).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily
| exploitable vulnerability allows high privileged attacker with
| network access via multiple protocols to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a partial denial of service
| (partial DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score
| 2.7 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).


CVE-2026-101780[56]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: X Plugin).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101781[57]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication GCS).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.12,
| 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49,
| 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows unauthenticated attacker with access to the
| physical communication segment attached to the hardware where the
| MySQL Server, MySQL Cluster executes to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.8
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-101784[58]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101785[59]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: JSON).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in  unauthorized creation, deletion or
| modification access to critical data or all MySQL Server, MySQL
| Cluster accessible data as well as  unauthorized read access to a
| subset of MySQL Server, MySQL Cluster accessible data and
| unauthorized ability to cause a hang or frequently repeatable crash
| (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score
| 8.3 (Confidentiality, Integrity and Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H).


CVE-2026-101787[60]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101788[61]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Components Services).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability
| allows unauthenticated attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in unauthorized ability to
| cause a hang or frequently repeatable crash (complete DOS) of MySQL
| Server, MySQL Cluster. CVSS 3.1 Base Score 5.9 (Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101789[62]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101794[63]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: XML).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101795[64]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Components Services).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability
| allows high privileged attacker with logon to the infrastructure
| where MySQL Server, MySQL Cluster executes to compromise MySQL
| Server, MySQL Cluster.  Successful attacks of this vulnerability can
| result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.7 (Confidentiality, Integrity and Availability impacts).
| CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).


CVE-2026-101796[65]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Replication).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks
| require human interaction from a person other than the attacker.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


CVE-2026-101797[66]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Client: mysqldump).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Difficult to exploit vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Server, MySQL Cluster.  Successful attacks
| require human interaction from a person other than the attacker.
| Successful attacks of this vulnerability can result in takeover of
| MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.5
| (Confidentiality, Integrity and Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).


CVE-2026-101798[67]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101799[68]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Group Replication GCS).  Supported
| versions that are affected are MySQL Server: 8.4.0-8.4.12,
| 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49,
| 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable
| vulnerability allows unauthenticated attacker with access to the
| physical communication segment attached to the hardware where the
| MySQL Server, MySQL Cluster executes to compromise MySQL Server,
| MySQL Cluster.  Successful attacks of this vulnerability can result
| in unauthorized ability to cause a hang or frequently repeatable
| crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base
| Score 6.5 (Availability impacts).  CVSS Vector:
| (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101800[69]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Security: Privileges).  Supported versions
| that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3,
| 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12,
| 9.7.0-9.7.3 and  26.7.0-26.7.1. Difficult to exploit vulnerability
| allows low privileged attacker with network access via multiple
| protocols to compromise MySQL Server, MySQL Cluster.  Successful
| attacks of this vulnerability can result in  unauthorized creation,
| deletion or modification access to critical data or all MySQL
| Server, MySQL Cluster accessible data as well as  unauthorized
| access to critical data or complete access to all MySQL Server,
| MySQL Cluster accessible data. CVSS 3.1 Base Score 6.8
| (Confidentiality and Integrity impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).


CVE-2026-101801[70]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Optimizer).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101802[71]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: Parser).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows low
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS
| Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).


CVE-2026-101803[72]:
| Vulnerability in the MySQL Server, MySQL Cluster product of Oracle
| MySQL (component: Server: XML).  Supported versions that are
| affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1;
| MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and
| 26.7.0-26.7.1. Easily exploitable vulnerability allows high
| privileged attacker with network access via multiple protocols to
| compromise MySQL Server, MySQL Cluster.  Successful attacks of this
| vulnerability can result in  unauthorized creation, deletion or
| modification access to critical data or all MySQL Server, MySQL
| Cluster accessible data and unauthorized ability to cause a hang or
| frequently repeatable crash (complete DOS) of MySQL Server, MySQL
| Cluster. CVSS 3.1 Base Score 6.5 (Integrity and Availability
| impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-101607
    https://www.cve.org/CVERecord?id=CVE-2026-101607
[1] https://security-tracker.debian.org/tracker/CVE-2026-101608
    https://www.cve.org/CVERecord?id=CVE-2026-101608
[2] https://security-tracker.debian.org/tracker/CVE-2026-101609
    https://www.cve.org/CVERecord?id=CVE-2026-101609
[3] https://security-tracker.debian.org/tracker/CVE-2026-101610
    https://www.cve.org/CVERecord?id=CVE-2026-101610
[4] https://security-tracker.debian.org/tracker/CVE-2026-101611
    https://www.cve.org/CVERecord?id=CVE-2026-101611
[5] https://security-tracker.debian.org/tracker/CVE-2026-101612
    https://www.cve.org/CVERecord?id=CVE-2026-101612
[6] https://security-tracker.debian.org/tracker/CVE-2026-101613
    https://www.cve.org/CVERecord?id=CVE-2026-101613
[7] https://security-tracker.debian.org/tracker/CVE-2026-101614
    https://www.cve.org/CVERecord?id=CVE-2026-101614
[8] https://security-tracker.debian.org/tracker/CVE-2026-101615
    https://www.cve.org/CVERecord?id=CVE-2026-101615
[9] https://security-tracker.debian.org/tracker/CVE-2026-101616
    https://www.cve.org/CVERecord?id=CVE-2026-101616
[10] https://security-tracker.debian.org/tracker/CVE-2026-101617
    https://www.cve.org/CVERecord?id=CVE-2026-101617
[11] https://security-tracker.debian.org/tracker/CVE-2026-101618
    https://www.cve.org/CVERecord?id=CVE-2026-101618
[12] https://security-tracker.debian.org/tracker/CVE-2026-101619
    https://www.cve.org/CVERecord?id=CVE-2026-101619
[13] https://security-tracker.debian.org/tracker/CVE-2026-101620
    https://www.cve.org/CVERecord?id=CVE-2026-101620
[14] https://security-tracker.debian.org/tracker/CVE-2026-101621
    https://www.cve.org/CVERecord?id=CVE-2026-101621
[15] https://security-tracker.debian.org/tracker/CVE-2026-101622
    https://www.cve.org/CVERecord?id=CVE-2026-101622
[16] https://security-tracker.debian.org/tracker/CVE-2026-101623
    https://www.cve.org/CVERecord?id=CVE-2026-101623
[17] https://security-tracker.debian.org/tracker/CVE-2026-101624
    https://www.cve.org/CVERecord?id=CVE-2026-101624
[18] https://security-tracker.debian.org/tracker/CVE-2026-101627
    https://www.cve.org/CVERecord?id=CVE-2026-101627
[19] https://security-tracker.debian.org/tracker/CVE-2026-101629
    https://www.cve.org/CVERecord?id=CVE-2026-101629
[20] https://security-tracker.debian.org/tracker/CVE-2026-101637
    https://www.cve.org/CVERecord?id=CVE-2026-101637
[21] https://security-tracker.debian.org/tracker/CVE-2026-101679
    https://www.cve.org/CVERecord?id=CVE-2026-101679
[22] https://security-tracker.debian.org/tracker/CVE-2026-101721
    https://www.cve.org/CVERecord?id=CVE-2026-101721
[23] https://security-tracker.debian.org/tracker/CVE-2026-101722
    https://www.cve.org/CVERecord?id=CVE-2026-101722
[24] https://security-tracker.debian.org/tracker/CVE-2026-101724
    https://www.cve.org/CVERecord?id=CVE-2026-101724
[25] https://security-tracker.debian.org/tracker/CVE-2026-101725
    https://www.cve.org/CVERecord?id=CVE-2026-101725
[26] https://security-tracker.debian.org/tracker/CVE-2026-101726
    https://www.cve.org/CVERecord?id=CVE-2026-101726
[27] https://security-tracker.debian.org/tracker/CVE-2026-101727
    https://www.cve.org/CVERecord?id=CVE-2026-101727
[28] https://security-tracker.debian.org/tracker/CVE-2026-101728
    https://www.cve.org/CVERecord?id=CVE-2026-101728
[29] https://security-tracker.debian.org/tracker/CVE-2026-101729
    https://www.cve.org/CVERecord?id=CVE-2026-101729
[30] https://security-tracker.debian.org/tracker/CVE-2026-101730
    https://www.cve.org/CVERecord?id=CVE-2026-101730
[31] https://security-tracker.debian.org/tracker/CVE-2026-101731
    https://www.cve.org/CVERecord?id=CVE-2026-101731
[32] https://security-tracker.debian.org/tracker/CVE-2026-101732
    https://www.cve.org/CVERecord?id=CVE-2026-101732
[33] https://security-tracker.debian.org/tracker/CVE-2026-101733
    https://www.cve.org/CVERecord?id=CVE-2026-101733
[34] https://security-tracker.debian.org/tracker/CVE-2026-101747
    https://www.cve.org/CVERecord?id=CVE-2026-101747
[35] https://security-tracker.debian.org/tracker/CVE-2026-101748
    https://www.cve.org/CVERecord?id=CVE-2026-101748
[36] https://security-tracker.debian.org/tracker/CVE-2026-101750
    https://www.cve.org/CVERecord?id=CVE-2026-101750
[37] https://security-tracker.debian.org/tracker/CVE-2026-101751
    https://www.cve.org/CVERecord?id=CVE-2026-101751
[38] https://security-tracker.debian.org/tracker/CVE-2026-101752
    https://www.cve.org/CVERecord?id=CVE-2026-101752
[39] https://security-tracker.debian.org/tracker/CVE-2026-101753
    https://www.cve.org/CVERecord?id=CVE-2026-101753
[40] https://security-tracker.debian.org/tracker/CVE-2026-101754
    https://www.cve.org/CVERecord?id=CVE-2026-101754
[41] https://security-tracker.debian.org/tracker/CVE-2026-101756
    https://www.cve.org/CVERecord?id=CVE-2026-101756
[42] https://security-tracker.debian.org/tracker/CVE-2026-101760
    https://www.cve.org/CVERecord?id=CVE-2026-101760
[43] https://security-tracker.debian.org/tracker/CVE-2026-101761
    https://www.cve.org/CVERecord?id=CVE-2026-101761
[44] https://security-tracker.debian.org/tracker/CVE-2026-101762
    https://www.cve.org/CVERecord?id=CVE-2026-101762
[45] https://security-tracker.debian.org/tracker/CVE-2026-101766
    https://www.cve.org/CVERecord?id=CVE-2026-101766
[46] https://security-tracker.debian.org/tracker/CVE-2026-101770
    https://www.cve.org/CVERecord?id=CVE-2026-101770
[47] https://security-tracker.debian.org/tracker/CVE-2026-101771
    https://www.cve.org/CVERecord?id=CVE-2026-101771
[48] https://security-tracker.debian.org/tracker/CVE-2026-101772
    https://www.cve.org/CVERecord?id=CVE-2026-101772
[49] https://security-tracker.debian.org/tracker/CVE-2026-101773
    https://www.cve.org/CVERecord?id=CVE-2026-101773
[50] https://security-tracker.debian.org/tracker/CVE-2026-101774
    https://www.cve.org/CVERecord?id=CVE-2026-101774
[51] https://security-tracker.debian.org/tracker/CVE-2026-101775
    https://www.cve.org/CVERecord?id=CVE-2026-101775
[52] https://security-tracker.debian.org/tracker/CVE-2026-101776
    https://www.cve.org/CVERecord?id=CVE-2026-101776
[53] https://security-tracker.debian.org/tracker/CVE-2026-101777
    https://www.cve.org/CVERecord?id=CVE-2026-101777
[54] https://security-tracker.debian.org/tracker/CVE-2026-101778
    https://www.cve.org/CVERecord?id=CVE-2026-101778
[55] https://security-tracker.debian.org/tracker/CVE-2026-101779
    https://www.cve.org/CVERecord?id=CVE-2026-101779
[56] https://security-tracker.debian.org/tracker/CVE-2026-101780
    https://www.cve.org/CVERecord?id=CVE-2026-101780
[57] https://security-tracker.debian.org/tracker/CVE-2026-101781
    https://www.cve.org/CVERecord?id=CVE-2026-101781
[58] https://security-tracker.debian.org/tracker/CVE-2026-101784
    https://www.cve.org/CVERecord?id=CVE-2026-101784
[59] https://security-tracker.debian.org/tracker/CVE-2026-101785
    https://www.cve.org/CVERecord?id=CVE-2026-101785
[60] https://security-tracker.debian.org/tracker/CVE-2026-101787
    https://www.cve.org/CVERecord?id=CVE-2026-101787
[61] https://security-tracker.debian.org/tracker/CVE-2026-101788
    https://www.cve.org/CVERecord?id=CVE-2026-101788
[62] https://security-tracker.debian.org/tracker/CVE-2026-101789
    https://www.cve.org/CVERecord?id=CVE-2026-101789
[63] https://security-tracker.debian.org/tracker/CVE-2026-101794
    https://www.cve.org/CVERecord?id=CVE-2026-101794
[64] https://security-tracker.debian.org/tracker/CVE-2026-101795
    https://www.cve.org/CVERecord?id=CVE-2026-101795
[65] https://security-tracker.debian.org/tracker/CVE-2026-101796
    https://www.cve.org/CVERecord?id=CVE-2026-101796
[66] https://security-tracker.debian.org/tracker/CVE-2026-101797
    https://www.cve.org/CVERecord?id=CVE-2026-101797
[67] https://security-tracker.debian.org/tracker/CVE-2026-101798
    https://www.cve.org/CVERecord?id=CVE-2026-101798
[68] https://security-tracker.debian.org/tracker/CVE-2026-101799
    https://www.cve.org/CVERecord?id=CVE-2026-101799
[69] https://security-tracker.debian.org/tracker/CVE-2026-101800
    https://www.cve.org/CVERecord?id=CVE-2026-101800
[70] https://security-tracker.debian.org/tracker/CVE-2026-101801
    https://www.cve.org/CVERecord?id=CVE-2026-101801
[71] https://security-tracker.debian.org/tracker/CVE-2026-101802
    https://www.cve.org/CVERecord?id=CVE-2026-101802
[72] https://security-tracker.debian.org/tracker/CVE-2026-101803
    https://www.cve.org/CVERecord?id=CVE-2026-101803

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

--- End Message ---

--- Begin Message ---

Source: mysql-9.7
Source-Version: 9.7.4-1
Done: Lena Voytek <l...@debian.org>

We believe that the bug you reported is fixed in the latest version of
mysql-9.7, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1151...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Lena Voytek <l...@debian.org> (supplier of updated mysql-9.7 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Oct 2026 18:26:37 -0500
Source: mysql-9.7
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 9.7.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian MySQL Maintainers <pkg-mysql-ma...@lists.alioth.debian.org>
Changed-By: Lena Voytek <l...@debian.org>
Closes: 1144888 1147428 1150604 1151663
Changes:
 mysql-9.7 (9.7.4-1) unstable; urgency=medium
 .
   [ Lena Voytek ]
     * Import upstream version 9.7.4 to fix security issues
     - https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixMSQL
     - CVE-2026-101607 CVE-2026-101608 CVE-2026-101609 CVE-2026-101610
       CVE-2026-101611 CVE-2026-101612 CVE-2026-101613 CVE-2026-101614
       CVE-2026-101615 CVE-2026-101616 CVE-2026-101617 CVE-2026-101618
       CVE-2026-101619 CVE-2026-101620 CVE-2026-101621 CVE-2026-101622
       CVE-2026-101623 CVE-2026-101624 CVE-2026-101627 CVE-2026-101629
       CVE-2026-101637 CVE-2026-101679 CVE-2026-101721 CVE-2026-101722
       CVE-2026-101724 CVE-2026-101725 CVE-2026-101726 CVE-2026-101727
       CVE-2026-101728 CVE-2026-101729 CVE-2026-101730 CVE-2026-101731
       CVE-2026-101732 CVE-2026-101733 CVE-2026-101747 CVE-2026-101748
       CVE-2026-101750 CVE-2026-101751 CVE-2026-101752 CVE-2026-101753
       CVE-2026-101754 CVE-2026-101756 CVE-2026-101760 CVE-2026-101761
       CVE-2026-101762 CVE-2026-101766 CVE-2026-101770 CVE-2026-101771
       CVE-2026-101772 CVE-2026-101773 CVE-2026-101774 CVE-2026-101775
       CVE-2026-101776 CVE-2026-101777 CVE-2026-101778 CVE-2026-101779
       CVE-2026-101780 CVE-2026-101781 CVE-2026-101784 CVE-2026-101785
       CVE-2026-101787 CVE-2026-101788 CVE-2026-101789 CVE-2026-101794
       CVE-2026-101795 CVE-2026-101796 CVE-2026-101797 CVE-2026-101798
       CVE-2026-101799 CVE-2026-101800 CVE-2026-101801 CVE-2026-101802
       CVE-2026-101803
     Upstream release notes:
     - https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html
     (Closes: #1151663)
   * Add port backoff to 3307 when 3306 is taken.
 .
   [ Américo Monteiro ]
   * Update pt.po translation file (Closes: #1144888)
 .
   [ Helge Kreutzmann ]
   * Update de.po translation file (Closes: #1147428)
 .
   [ Frans Spiesschaert ]
   * Update nl.po translation file (Closes: #1150604)
Checksums-Sha1:
 512638321134ae515bc19c7989639e31f5a83ef2 3543 mysql-9.7_9.7.4-1.dsc
 ca2c96bf3e256d7b70fa6442b25be01364ca1b22 429487828 mysql-9.7_9.7.4.orig.tar.gz
 405af6d171b5676b00ff0675e52c6c5b452a5337 833 mysql-9.7_9.7.4.orig.tar.gz.asc
 05ea7a701fed53fd5cd33bf2f7fa67bc799ffde6 144160 mysql-9.7_9.7.4-1.debian.tar.xz
 d4739a75472acb6aa858eea420e8825c760411eb 9255 
mysql-9.7_9.7.4-1_source.buildinfo
Checksums-Sha256:
 02fc9e19963a2ad06498fb9fc9717a6e2d11a2a38cdbffe027a4ad528bd1a5ba 3543 
mysql-9.7_9.7.4-1.dsc
 9188eb1abec42b8ab8bb69948492f06258dd27e6aabd13e2d4c6197dbcde75b2 429487828 
mysql-9.7_9.7.4.orig.tar.gz
 389b047cd58b5138615c08f7214dbede3e54b2fb5382f61c2399f05f609992dd 833 
mysql-9.7_9.7.4.orig.tar.gz.asc
 19c272b7516ffd3b005d57a060bc0a838e30116f8b7754ef7972fe520ab3996b 144160 
mysql-9.7_9.7.4-1.debian.tar.xz
 6e937b007a96ae8eeacc0be9b27bfb3ca782454a60a233024a217c0d6b30cb40 9255 
mysql-9.7_9.7.4-1_source.buildinfo
Files:
 030eb554f8388fd9376a4dfc0779747e 3543 database optional mysql-9.7_9.7.4-1.dsc
 55a8f054435120d47d7a8700986997fd 429487828 database optional 
mysql-9.7_9.7.4.orig.tar.gz
 2f45031bc872433dddf0eb5d1c4a4223 833 database optional 
mysql-9.7_9.7.4.orig.tar.gz.asc
 776e6b52f02dcd4f8dfc02e8551684b4 144160 database optional 
mysql-9.7_9.7.4-1.debian.tar.xz
 540469ea424e2274af79b99203ddde0d 9255 database optional 
mysql-9.7_9.7.4-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCgAuFiEEY+78PeFNUUbOfyS/NLitfZUp55MFAmray8oQHGxlbmFAZGVi
aWFuLm9yZwAKCRA0uK19lSnnkxi+D/0ZZR9yH9c0zyeuqjvqFUWQ8UgWLaLoWLGG
/mOwtHtd92rD3v8S5ELgYp0P9NVLHAzX9nmElGHZMEMDENqlzebcDuqyHcAv99r3
l4LX03sS1+kuHc2xhcuJFCYwjyrtt/VAmmgvYpCdh9csBoJ+R0fdZcr32XhlgNkR
NYQjBi7lhwCAPXUKKQLU94XinJdz1eZwL5blegfMvu3d/gTIM7Z4v90sJ1QmXC3P
60dJi/VhTXk6kVCNHQzhaRCvW3H5JNqld9hAd8VmiwThJFG1OgE91NesmzO07mZ1
DlzG9BWpeETxj2T6Lsk6psOoNdDU+L+/l9squkvWK+KAPP3tN6N75Xr1p56rD9Uy
EhA8Ho8/kUKyMCa4XcX/Xl212XJgZ2n6F9+acOZlUl0XdN6ahbuDohflAsmvlONZ
YGe6pVjPKAZ9DfthPREGnuNGCSVO3iq05sd/wpk4po8hVaLwu5cGmdkzFWyZH+6f
AP6fWDGR/t199gz+4GsrIolnDv3VgAclr79nZCddQWD2q63ZcxyrR/eFxgkJ0RDg
HhQxfPf8f7EfwQlY+4j8uYM7E42wD57MdCMJfcrR1zX/5jC/AntQlCGowaC4ogif
271deuX9z1vm/J6ZA3SgQjBtUZBdkzVMmal5hxnk6Df6hDeXmYAs+b3IH051astr
uzSr2SO51Q==
=p8/n
-----END PGP SIGNATURE-----

pgpEH5EIafSr6.pgp
Description: PGP signature

--- End Message ---