CVE-2026-101607Medium· 4.9▾ SunlitA flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability through multiple protocols to cause the service to hang or crash repeatedly. Successful expl…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.3%
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability through multiple protocols to cause the service to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service (DoS), making the database unavailable to legitimate users.
mysql: mysql: Denial of Service in Server Optimizer — rated Moderate by Red Hat. Released 2026-10-20, updated 2026-10-22.
Affected:
No fix planned:
Not affected:
Affected
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101776Medium· 4.9mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)
CVE-2026-101787Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)
CVE-2026-101798Medium· 4.9mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)
CVE-2026-101801Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)
CVE-2026-101608Medium· 6.5mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)
CVE-2026-101609Medium· 4.4mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)