Dashboard / CVE-2026-101612

CVE-2026-101612

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 8/100
Published: 2026-10-20 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H).

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
Oracle Corporation MySQL Cluster 8.0.0-8.0.49
Oracle Corporation MySQL Cluster 8.4.0-8.4.12
Oracle Corporation MySQL Cluster 9.7.0-9.7.3
Oracle Corporation MySQL Cluster 26.7.0-26.7.1
Oracle Corporation MySQL Server 8.4.0-8.4.12
Oracle Corporation MySQL Server 9.7.0-9.7.3
Oracle Corporation MySQL Server 26.7.0-26.7.1

References & Advisories (1)

Bug Bounty Relevance

8 / 100

CVSS Score

4.0 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.11%
Raw Score 0.001130
Percentile 1.5%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00113
2026-11-13
0.00113
2026-11-12
0.00113
2026-11-10
0.00113
2026-11-09
0.00113
2026-11-08
0.00113
2026-11-07
0.00113
2026-11-06
0.00113
2026-11-05
0.00113

Intelligence Sources

mitre ref →
nvd ref →

External Links