Critical [CVE-2026-101607 +65] October 2026 MySQL Server 8.4.0, 9.7.0, 9.7.3 Vulnerabilities in NetApp Products
This critical-severity NetApp advisory covers CVE-2026-101607 and CVE-2026-101608 and 64 more CVEs affecting SnapCenter.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations. This bulletin covers 66 CVEs; its score, affected versions and guidance may apply to different issues within that bulletin.
VulniPulse record published
Get an email when NetApp publishes the next one.
VulniPulse checks NetApp's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
Summary
MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 are susceptible to vulnerabilities which, when successfully exploited, could allow an attacker with varying levels of access and privileges to compromise MySQL Server. Refer to the “Oracle Critical Patch Update Advisory - October 2026” for additional details.
Successful attacks of these vulnerabilities can result in unauthorized access to some or all of MySQL Server accessible data, unauthorized ability to cause a Denial of Service (DOS) of MySQL Server or a takeover of MySQL Server. Affected products: SnapCenter.
NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.
- 8.4.0
- 8.4.12
- 9.7.0
- 9.7.3
- 26.7.0
- 26.7.1
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists. Confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Mitigation checklist
- Refer to the “Oracle Critical Patch Update Advisory - October 2026” for additional details.
- Full Support versions of SnapCenter Server allow MySQL software to be upgraded within documented constraints. Consult the product documentation for supported MySQL versions and other information related to the upgrade. <br><br> In Full Support versions of OnCommand Insight the MySQL software can be upgraded after acquiring updated OnCommand Insight binaries via technical support.
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
More NetApp advisories
- CVE-2025-11143Sep 18, 2026Jetty Vulnerability in NetApp Products
- CVE-2026-64958Sep 11, 2026Apache CXF Vulnerability in NetApp Products
- CVE-2026-57819Sep 11, 2026Apache CXF Vulnerability in NetApp Products
- CVE-2026-54225Sep 11, 2026Apache CXF Vulnerability in NetApp Products
- CVE-2026-46936Jul 31, 2026July 2026 MySQL Server 8.4.0 and 9.7.0 Vulnerabilities in NetApp Products
- CVE-2026-45591Jul 3, 2026ASP.NET Core Vulnerability in NetApp Products
Android app · Google Play
Monitor future NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.