Denial of Service Vulnerability in MySQL Server and MySQL Cluster by Oracle
CVE-2026-60324

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60324?

A vulnerability exists in Oracle MySQL Server and MySQL Cluster components that can be exploited by a low privileged attacker with network access. This flaw allows an attacker to induce a denial of service condition, where MySQL Server or MySQL Cluster may hang or crash repeatedly. Attackers leveraging this vulnerability can disrupt database operations, affecting availability and performance of services relying on these databases.

Affected Version(s)

MySQL Cluster 9.7.0-9.7.1

MySQL Server 9.7.0-9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.