CVE-2026-101726

A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is rated Moderate rather than Important because successful exploitation requires an attacker to possess valid credentials and network connectivity to the database service. While triggering the flaw can disrupt service availability by forcing the MySQL daemon to terminate or become unresponsive, it does not permit unauthorized data disclosure or modification. In standard Red Hat Enterprise Linux deployments, database instances are typically shielded behind internal networks and restricted to authenticated clients, constraining the exposure and blast radius of this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.