Is CVE-2026-101773 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-101773 being exploited in the wild.

How severe is CVE-2026-101773?

High severity, with a CVSS score of 7.1, published 20 October 2026.

Which products and versions are affected?

Oracle MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; Oracle Mysql Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.

Is there a fix for CVE-2026-101773?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-101773 attacked?

It is attacked from the adjacent network, in a hosted service.

Am I affected by CVE-2026-101773?

Check whether you run Oracle MySQL Server or Oracle Mysql Cluster at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-101773: Oracle MySQL Server DoS and data modification in Group Replication

CVE-2026-101773 · Severity: high · CVSS 7.1 · Published 2026-10-20

Oracle MySQL Server and MySQL Cluster contain a vulnerability in the Group Replication plugin that allows an attacker with access to the local network to cause service disruption or modify database contents. An unauthenticated attacker can exploit this to crash the database or alter, insert, or delete data, potentially leading to system downtime or unauthorized data changes that impact business operations.

Technologies: Oracle MySQL Server, Oracle Mysql Cluster. Vendors: Oracle.

Quick answers

Is CVE-2026-101773 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-101773 being exploited in the wild.
How severe is CVE-2026-101773?: High severity, with a CVSS score of 7.1, published 20 October 2026.
Which products and versions are affected?: Oracle MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; Oracle Mysql Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1.
Is there a fix for CVE-2026-101773?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-101773 attacked?: It is attacked from the adjacent network, in a hosted service.
Am I affected by CVE-2026-101773?: Check whether you run Oracle MySQL Server or Oracle Mysql Cluster at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability in the Group Replication plugin (Server: Group Replication Plugin component) is easily exploitable by an unauthenticated attacker with adjacent network access (AV:A). The attack requires no authentication, user interaction, or configuration complexity (AC:L, PR:N, UI:N). Successful exploitation results in denial of service via crash or hang, and unauthorized integrity and availability impacts on replication data.

Affected products

Oracle MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1
Oracle MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1

Timeline

2026-10-20: disclosed

References

https://www.oracle.com/security-alerts/cpuoct2026.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.