CVE-2026-101728

A flaw was found in MySQL's Pluggable Auth component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network across multiple protocols. Successful exploitation allows the attacker to cause the database service to hang or repeatedly crash, resulting in a Denial of Service (DoS).

This vulnerability is rated Moderate because exploitation requires valid authentication credentials with low privileges, limiting the attack surface to authenticated users, and the resulting impact is confined to service availability without compromising confidentiality or data integrity. In standard Red Hat enterprise environments, MySQL deployments are typically isolated within internal network segments and restricted to authorized application tiers. Consequently, exposure is limited to configurations where untrusted entities possess active database credentials.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.