MySQL Cluster Vulnerability in Oracle MySQL Products
CVE-2026-60569

5.1MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Cluster
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60569?

A vulnerability exists in the MySQL Cluster component of Oracle MySQL that allows an unauthenticated attacker who can log on to the infrastructure where MySQL Cluster operates to compromise the system. This flaw can lead to unauthorized access to vital data, potentially exposing critical information from all accessible MySQL Cluster data. The vulnerability affects multiple versions, making it imperative for users to review their systems and take appropriate security measures.

Affected Version(s)

MySQL Cluster 8.0.0 <= 8.0.47

MySQL Cluster 8.4.0 <= 8.4.10

MySQL Cluster 9.7.0 <= 9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.