CVE-2026-60190: mysql server 9.7.0, 9.7.1; +3 more affected products

Affected technology

mysql server · from 8.4.0 (inclusive), through 8.4.10 (inclusive)
oracle

mysql server · 9.7.0
oracle

mysql server · 9.7.1
oracle

mysql cluster · from 8.0.0 (inclusive), through 8.0.47 (inclusive)
oracle

mysql cluster · from 8.4.0 (inclusive), through 8.4.10 (inclusive)
oracle

mysql cluster · 9.7.0
oracle

mysql cluster · 9.7.1
oracle

MySQL Server · 8.4.0-8.4.10, 9.7.0-9.7.1
Oracle Corporation

MySQL Cluster · 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

High privileged attacker with network access via multiple protocols can compromise MySQL Server, MySQL Cluster. Vendor/CNA’s CVSS 3.1 assessment (base score 2.2/10) rates confidentiality and integrity impact as none; availability impact as low.