{"id":"CVE-2026-101720","title":"mysql: mysql: unauthorized data modification via connection handling (CVE-2026-101720)","summary":"A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"vendor","cwe":"CWE-306","vendor":"Red Hat","product":"Red Hat Hardened Images","affected":["hardened_images"],"published":"2026-10-20","updated":"2026-10-23","sourceUpdated":"2026-10-23T19:20:58+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-101720"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557795"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-101720"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101720"},{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00327,"epssPercentile":0.25661,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-22T18:48:25.052435Z"},"ingestedAt":"2026-10-20T22:23:33.943Z","slug":"CVE-2026-101720","body":"## Overview\n\nA flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data modifications, resulting in the creation, alteration, or deletion of accessible data.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json)\n\n**mysql: mysql: unauthorized data modification via connection handling** — rated Moderate by Red Hat. Released 2026-10-20, updated 2026-10-23.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}