Security Flaw in Oracle MySQL Connectors: Versions 9.7.0-9.7.1 Vulnerable
CVE-2026-60179

7.4HIGH

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60179?

A vulnerability exists in the Oracle MySQL Connectors, specifically within the Connector/C++ component. This flaw, affecting versions 9.7.0 and 9.7.1, can be exploited by unauthenticated attackers with network access through various protocols. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data. Furthermore, attackers could gain unauthorized access to sensitive information, thus jeopardizing the integrity and confidentiality of all data accessible through MySQL Connectors. Organizations utilizing these specific versions should take immediate action to mitigate the associated risks.

Affected Version(s)

MySQL Connectors 9.7.0 <= 9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.