MySQL Server Vulnerability in Oracle MySQL Affects Multiple Versions
CVE-2026-61109

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Mysql Cluster
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61109?

This vulnerability in Oracle MySQL's Server and Cluster components allows a low privileged attacker with network access to exploit the affected MySQL Server and Cluster versions. Successful exploitation can lead to unauthorized crashes or hanging of the MySQL services, resulting in denial of service. Organizations using MySQL Server versions 8.4.0 to 8.4.10, 9.7.0 to 9.7.1, and MySQL Cluster versions 8.0.0 to 8.0.47, 8.4.0 to 8.4.10, and 9.7.0 to 9.7.1 are especially susceptible to this threat. It is critical for users to implement security measures to mitigate potential impacts from this vulnerability.

Affected Version(s)

MySQL Cluster 8.0.0-8.0.47

MySQL Cluster 8.4.0-8.4.10

MySQL Cluster 9.7.0-9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.