CVE-2026-101794

A flaw was found in the XML component of MySQL. An authenticated, low-privileged remote attacker with network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in a hang or frequently repeatable server crash, rendering the database unavailable.

This vulnerability is rated as having a Moderate impact because, while exploitation can trigger a complete denial of service by terminating or hanging the database instance, it strictly requires valid low-privileged credentials and cannot compromise data confidentiality or integrity. In typical Red Hat Enterprise Linux environments, MySQL database instances are deployed within secured private networks or bound exclusively to local interfaces, restricting potential exposure to trusted systems. Consequently, the blast radius is confined to service availability and is constrained to environments where untrusted users possess database login access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.