---
id: CVE-2026-101720
title: >-
  mysql: mysql: unauthorized data modification via connection handling
  (CVE-2026-101720)
summary: >-
  A flaw was found in MySQL connection handling. An unauthenticated remote
  attacker with network access can exploit this vulnerability to compromise the
  database server. Successful exploitation allows an attacker to perform
  unauthorized data…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: vendor
cwe: CWE-306
vendor: Red Hat
product: Red Hat Hardened Images
affected:
  - hardened_images
published: '2026-10-20'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T19:20:58+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-101720'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2557795'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-101720'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101720'
  - url: 'https://www.oracle.com/security-alerts/cpuoct2026.html'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00327
epssPercentile: 0.25661
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-22T18:48:25.052435Z'
ingestedAt: '2026-10-20T22:23:33.943Z'
---

## Overview

A flaw was found in MySQL connection handling. An unauthenticated remote attacker with network access can exploit this vulnerability to compromise the database server. Successful exploitation allows an attacker to perform unauthorized data modifications, resulting in the creation, alteration, or deletion of accessible data.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101720.json)

**mysql: mysql: unauthorized data modification via connection handling** — rated Moderate by Red Hat. Released 2026-10-20, updated 2026-10-23.

Not affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images

## Remediation

Refer to the advisory for fix availability.