CVE-2026-101803

A flaw was found in the XML component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is classified as Moderate for Red Hat Enterprise Linux because exploitation requires an attacker to already possess high administrative privileges on the database server. While a successful exploit against the XML processing facility can compromise data integrity or trigger a denial of service, the prerequisite for elevated permissions significantly narrows the potential threat vector in standard deployments. Unauthenticated remote users and non-privileged database accounts cannot trigger this condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.