CVE-2026-60316: High severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.4.0-8.4.10 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.7.0-9.7.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.0.0-8.0.47
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60316?
The severity of CVE-2026-60316 is high with a score of 7.2.
What versions are affected by CVE-2026-60316?
CVE-2026-60316 affects MySQL Server versions 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1.
How do I fix CVE-2026-60316?
To fix CVE-2026-60316, upgrade MySQL Server or MySQL Cluster to a version that is not affected by the vulnerability.
What is the impact of CVE-2026-60316?
CVE-2026-60316 allows high privileged users to exploit the vulnerability to cause significant impacts on confidentiality, integrity, and availability.
Is CVE-2026-60316 easily exploitable?
Yes, CVE-2026-60316 is considered easily exploitable, allowing attackers with high privileges to potentially compromise the system.