CVE-2026-60183: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the risk level of CVE-2026-60183?
CVE-2026-60183 has a risk level of 56, categorized as medium severity with a score of 6.4.
Which versions of MySQL Server are affected by CVE-2026-60183?
CVE-2026-60183 affects MySQL Server versions 8.4.0 to 8.4.10 and 9.7.0 to 9.7.1.
How do I mitigate the vulnerabilities in CVE-2026-60183?
To mitigate CVE-2026-60183, it is recommended to upgrade to a supported version of MySQL Server that is not affected by the vulnerability.
Does CVE-2026-60183 affect MySQL Cluster?
Yes, CVE-2026-60183 affects MySQL Cluster versions 8.0.0 to 8.0.47, 8.4.0 to 8.4.10, and 9.7.0 to 9.7.1.
What type of vulnerability is CVE-2026-60183?
CVE-2026-60183 is classified as a difficult to exploit vulnerability that allows high privilege access or impact.