Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-20T21:22:30 mysql: mysql: unauthorized data modification via connection handling 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CWE-306

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data modifications, resulting in the creation, alteration, or deletion of accessible data.

This vulnerability is rated as Moderate severity because, although exploitable over the network without authentication, the impact is confined to low-integrity data modification without compromising system confidentiality or causing a denial of service. In typical Red Hat environments, database servers are isolated within secured network perimeters or configured to accept connections exclusively from trusted application tiers, significantly mitigating exposure to untrusted parties. Red Hat Enterprise Linux 10 Not affected mysql8.4 Red Hat Enterprise Linux 6 Not affected mysql Red Hat Enterprise Linux 9 Not affected mysql Red Hat Hardened Images Not affected mariadb10.11 Red Hat Hardened Images Not affected mariadb11.8 https://www.cve.org/CVERecord?id=CVE-2026-101720 https://nvd.nist.gov/vuln/detail/CVE-2026-101720 https://www.oracle.com/security-alerts/cpuoct2026.html