CVE-2026-60193: High severity Oracle MySQL Connectors (Connector/Net) vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (Connector/Net) - MySQL Connectorsto a version that resolves this vulnerability.Fixed in 9.7.0-9.7.1
Event History
Frequently Asked Questions
What is the CVSS severity of CVE-2026-60193?
The CVSS severity of CVE-2026-60193 is classified as high with a score of 8.5.
What versions of Oracle MySQL Connectors are affected by CVE-2026-60193?
The affected versions of Oracle MySQL Connectors for CVE-2026-60193 are 9.7.0 and 9.7.1.
Who can exploit CVE-2026-60193?
CVE-2026-60193 can be exploited by a low privileged attacker with network access.
What impacts does CVE-2026-60193 have on MySQL Connectors?
CVE-2026-60193 allows an attacker to compromise MySQL Connectors with potential impacts on confidentiality, integrity, and availability.
How can I mitigate the risks of CVE-2026-60193?
To mitigate the risks of CVE-2026-60193, upgrade Oracle MySQL Connectors to a non-affected version.