CVE-2026-60586: High severity Oracle MySQL Connectors vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (Connector/J)to a version that resolves this vulnerability.Fixed in 9.7.0-9.7.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60586?
CVE-2026-60586 has a severity rating of high with a score of 7.7.
How does CVE-2026-60586 affect Oracle MySQL Connectors?
CVE-2026-60586 affects Oracle MySQL Connectors versions 9.7.0 to 9.7.1, allowing a low privileged attacker to exploit it.
What are the consequences of exploiting CVE-2026-60586?
Exploiting CVE-2026-60586 allows attackers with network access to compromise the MySQL Connectors.
How can I fix CVE-2026-60586?
To fix CVE-2026-60586, it is recommended to upgrade your Oracle MySQL Connectors to the latest version beyond 9.7.1.
Who is at risk from CVE-2026-60586?
Low privileged attackers with network access via multiple protocols are at risk of exploiting CVE-2026-60586.