CVE-2026-101774

A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Denial of Service (DoS). In addition, successful exploitation may allow unauthorized modification, insertion, or deletion of accessible database records.

This vulnerability is rated as having a Moderate impact because exploitation requires satisfying complex attack conditions despite being remotely accessible without prior authentication. Under standard Red Hat Enterprise Linux deployments, database instances are typically shielded behind internal networks or firewalls, further limiting exposure to untrusted network traffic. While a successful exploit could trigger service instability or partial record manipulation, confidentiality remains unaffected and exploitation cannot be executed trivially.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.