CVE-2026-101720
mysql: mysql: unauthorized data modification via connection handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 24, 2026
Description
A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data modifications, resulting in the creation, alteration, or deletion of accessible data.
Statement
This vulnerability is rated as Moderate severity because, although exploitable over the network without authentication, the impact is confined to low-integrity data modification without compromising system confidentiality or causing a denial of service. In typical Red Hat environments, database servers are isolated within secured network perimeters or configured to accept connections exclusively from trusted application tiers, significantly mitigating exposure to untrusted parties.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-306 · Missing Authentication for Critical Function