CVE-2026-60569: Medium severity Oracle MySQL Cluster vulnerability
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Cluster accessible data. CVSS 3.1 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60569?
The severity of CVE-2026-60569 is rated medium with a score of 5.1.
How do I fix CVE-2026-60569?
To fix CVE-2026-60569, update to the latest supported version of Oracle MySQL Cluster that is not affected by this vulnerability.
What versions of Oracle MySQL Cluster are affected by CVE-2026-60569?
The affected versions of Oracle MySQL Cluster for CVE-2026-60569 include 8.0.0 to 8.0.47, 8.4.0 to 8.4.10, and 9.7.0 to 9.7.1.
What kind of attacker can exploit CVE-2026-60569?
CVE-2026-60569 can be exploited by an unauthenticated attacker who has logon access to the infrastructure where MySQL Cluster is running.
What components of Oracle MySQL are affected by CVE-2026-60569?
The component affected by CVE-2026-60569 is the Cluster: NDB Operator in the Oracle MySQL product.