CVE Database›CVE-2026-101766

CVE-2026-101766

mysql: mysql: Denial of service in replication component

Loading…

Severity

Moderate

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · October 23, 2026

Description

A flaw was found in the MySQL replication component. A remote, highly privileged attacker could exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or crash repeatedly. This issue leads to a complete denial of service (DoS), making the database service unavailable to authorized users.

Statement

Red Hat Product Security rates the security impact of this vulnerability as Moderate because successful exploitation requires an attacker to possess elevated administrative privileges and satisfy complex execution conditions. In typical Red Hat Enterprise Linux deployments, database administrative credentials and replication streams are tightly controlled and confined to trusted administrative networks. An authenticated attacker with sufficient privileges could trigger a crash or hang in the replication component, causing a denial of service without compromising data confidentiality or system integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-400 · Uncontrolled Resource Consumption