CVE-2016-5541: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI).

Security readout for executives and security teams

CVE-2016-5541 affects Oracle MySQL Cluster NDBAPI. An unauthenticated network attacker could alter some accessible cluster data or cause a partial service disruption. Oracle described exploitation as difficult and the CVSS v3 score is 4.8, so urgency is moderate unless the cluster is reachable from untrusted networks. Exposure is likely limited to organizations running Oracle MySQL Cluster NDB versions in the affected ranges. Risk increases where cluster-related network services are reachable by untrusted users or networks. Standard MySQL deployments without MySQL Cluster/NDBAPI are not identified as affected in the provided sources. Treat as a moderate-priority infrastructure patch. Escalate if MySQL Cluster is internet-facing, partner-facing, or reachable from broad internal networks, because the potential impact includes data integrity changes and service degradation. Mitigation focus: Apply Oracle's January 2017 Critical Patch Update or later vendor-provided MySQL Cluster security update.; If exact fixed versions are unclear, check current Oracle MySQL Cluster advisory guidance.; Restrict MySQL Cluster/NDBAPI network access to trusted systems only..

Prepared

Jun 13, 2026, 11:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.