Review reviewHigh

CVE-2026-60315

Oracle Corporation MySQL Server, MySQL Cluster, mysql server

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to...

CVSS: 8.2
EPSS: -
CISA KEV: Not listed
Published: 2026.07.22

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 8.2

Vulnerability overview

Affected product and versions

Product: Oracle Corporation MySQL Server, MySQL Cluster, mysql server
Affected versions: >= 8.4.0-8.4.10, >= 9.7.0-9.7.1, >= 8.0.0-8.0.47, >= 8.4.0 <= 8.4.10, 9.7.0, 9.7.1, >= 8.0.0 <= 8.0.47
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Oracle Corporation MySQL Server, MySQL Cluster, mysql server and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE: CWE-200