CVE Database›CVE-2026-101761

CVE-2026-101761

mysql: mysql: Denial of Service via security encryption component

Loading…

Severity

Moderate

Red Hat Product Security

5.9

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in MySQL. An unauthenticated remote attacker with network access via multiple protocols can exploit this vulnerability in the security encryption component to cause the service to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service (DoS).

Statement

This vulnerability is rated as Moderate severity because exploitation requires overcoming high attack complexity to induce a denial-of-service condition, while confidentiality and integrity remain unaffected. In typical Red Hat Enterprise Linux environments, database services are isolated within protected internal network segments or configured to listen only on trusted interfaces, limiting unauthenticated exposure. Consequently, the flaw primarily impacts service availability under specific conditions rather than allowing arbitrary code execution or data exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 · Allocation of Resources Without Limits or Throttling