CVE-2026-101616Medium· 6.5▾ SunlitA flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitatio…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.4%
Last analysed / modified upstream
0.4% → 0.4%
A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service (DoS) of the affected database service.
mysql: MySQL: Denial of Service via JSON component — rated Moderate by Red Hat. Released 2026-10-20, updated 2026-10-23.
Affected:
No fix planned:
Not affected:
Affected
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101733Medium· 6.5mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)
CVE-2026-101770High· 8.1mysql: mysql: System takeover via client programs (CVE-2026-101770)
CVE-2026-101771High· 8.1mysql: mysql: complete service takeover via network access (CVE-2026-101771)
CVE-2026-101772High· 8.1mysql: mysql: unauthorized server takeover (CVE-2026-101772)
CVE-2026-101797High· 7.5mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)
CVE-2026-101607Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)