CVE-2026-101637Medium· 5.5▾ Sunlit

mysql: mysql: Denial of Service via InnoDB component (CVE-2026-101637)

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score30/ 100 · Low

impact 30.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Oct 20, 2026

Updated

Oct 23, 2026

CVSS

5.5

Vendor

Red Hat

Product

MySQL Server

CWE

CWE-617

Depth score

30 · Low

EPSS

0.40% · p34

Platforms

—

Source

CSAF

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

CISA SSVC

decided 2026-10-21

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 21.

0.4% → 0.4%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 6 days

Oct 20, 2026Published
Disclosed via CSAF
Oct 21, 2026EPSS first tracked
0.4%
Oct 23, 2026Record revised
Last analysed / modified upstream
Oct 26, 2026EPSS peak
0.4% → 0.4%

Red Hat CWE-617 #csaf #vex #red-hat #cve.org

Affected

mysql_server 9.7.0-9.7.3
mysql_server 26.7.0-26.7.1
mysql_cluster 9.7.0-9.7.3
mysql_cluster 26.7.0-26.7.1

Full technical detail▾

Overview

A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service (DoS). Additionally, exploitation can allow unauthorized data modification, enabling the attacker to insert, update, or delete certain database records.

Vendor advisories

Red Hat VEX · Moderate · updated 2026-10-23 · vex

mysql: mysql: Denial of Service via InnoDB component — rated Moderate by Red Hat. Released 2026-10-20, updated 2026-10-23.

Not affected:

Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 9
Red Hat Hardened Images

Remediation

Refer to the advisory for fix availability.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#csaf#vex#red-hat#cve.org

← Back to feed