CVE-2026-101766
mysql: mysql: Denial of service in replication component
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the MySQL replication component. A remote, highly privileged attacker could exploit this vulnerability over the network to cause MySQL Server or MySQL Cluster to hang or crash repeatedly. This issue leads to a complete denial of service (DoS), making the database service unavailable to authorized users.
Statement
Red Hat Product Security rates the security impact of this vulnerability as Moderate because successful exploitation requires an attacker to possess elevated administrative privileges and satisfy complex execution conditions. In typical Red Hat Enterprise Linux deployments, database administrative credentials and replication streams are tightly controlled and confined to trusted administrative networks. An authenticated attacker with sufficient privileges could trigger a crash or hang in the replication component, causing a denial of service without compromising data confidentiality or system integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption