CVE-2026-60163: High severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (Server: Group Replication Plugin)to a version that resolves this vulnerability.Fixed in 8.4.10 - Upgrade
Upgrade
Oracle MySQL (Server: Group Replication Plugin)to a version that resolves this vulnerability.Fixed in 9.7.1 - Upgrade
Upgrade
Oracle MySQL Cluster (Server: Group Replication Plugin)to a version that resolves this vulnerability.Fixed in 8.0.47 - Upgrade
Upgrade
Oracle MySQL Cluster (Server: Group Replication Plugin)to a version that resolves this vulnerability.Fixed in 9.7.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60163?
CVE-2026-60163 has a high severity rating of 8.4.
What versions are affected by CVE-2026-60163?
CVE-2026-60163 affects MySQL Server versions 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1.
How can CVE-2026-60163 be exploited?
CVE-2026-60163 is an easily exploitable vulnerability in the MySQL Server's Group Replication Plugin.
What are the potential impacts of CVE-2026-60163?
CVE-2026-60163 can lead to complete compromise of confidentiality, integrity, and availability of the MySQL Server.
How do I fix CVE-2026-60163?
To fix CVE-2026-60163, it is recommended to update MySQL Server or MySQL Cluster to the latest patched version.