CVE-2026-60585

EUVD-2026-46947

21.07.2026, 22:17

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and  9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.6 MEDIUM	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 28.15%

Affected Products (NVD)

Vendor	Product	Version
oracle	mysql_server	8.4.0 ≤ 𝑥 ≤ 8.4.10
oracle	mysql_server	9.7.0
oracle	mysql_server	9.7.1
oracle	mysql_cluster	8.0.0 ≤ 𝑥 ≤ 8.0.47
oracle	mysql_cluster	8.4.0 ≤ 𝑥 ≤ 8.4.10
oracle	mysql_cluster	9.7.0
oracle	mysql_cluster	9.7.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

mariadb

bookworm	1:10.11.18-0+deb12u1 fixed
bookworm (security)	1:10.11.19-0+deb12u1 fixed
forky	1:11.8.9+ds-2 fixed
sid	1:11.8.9+ds-4 fixed
trixie	no-dsa

mysql-9.7

sid	9.7.2-4 fixed

Ubuntu Releases

Ubuntu Product

Codename

mysql-5.5

jammy	dne
noble	dne
resolute	dne
trusty	ignored

mysql-5.7

bionic	ignored
jammy	dne
noble	dne
resolute	dne
xenial	ignored

mysql-8.0

focal	needs-triage
jammy	Fixed 8.0.46-0ubuntu0.22.04.4 released
noble	Fixed 8.0.46-0ubuntu0.24.04.4 released
resolute	dne

mysql-8.4

jammy	dne
noble	dne
resolute	Fixed 8.4.11-0ubuntu0.26.04.1 released

mariadb

jammy	dne
noble	needs-triage
resolute	needs-triage

mariadb-10.0

jammy	dne
noble	dne
resolute	dne
xenial	needs-triage

mariadb-10.1

bionic	needs-triage
jammy	dne
noble	dne
resolute	dne

mariadb-10.3

focal	ignored
jammy	dne
noble	dne
resolute	dne

mariadb-10.6

jammy	needs-triage
noble	dne
resolute	dne

percona-xtradb-cluster-5.6

jammy	dne
noble	dne
resolute	dne
xenial	needs-triage

percona-server-5.6

jammy	dne
noble	dne
resolute	dne
xenial	needs-triage

Amazon Linux Releases

Amazon Package

Release

mariadb1011

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-backup

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-backup-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-client-utils

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-common

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-connect-engine

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-connect-engine-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-cracklib-password-check

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-cracklib-password-check-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-debugsource

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-devel

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-errmsg

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-gssapi-server

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-gssapi-server-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-oqgraph-engine

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-oqgraph-engine-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-pam

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-pam-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-rocksdb-engine

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-rocksdb-engine-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-server

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-server-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-server-utils

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-server-utils-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-sphinx-engine

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-sphinx-engine-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-test

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb1011-test-debuginfo

Amazon Linux 2023

3:10.11.19-1.amzn2023.0.1

fixed

mariadb114

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-backup

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-backup-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-client-utils

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-common

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-connect-engine

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-connect-engine-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-cracklib-password-check

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-cracklib-password-check-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-debugsource

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-devel

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-errmsg

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-gssapi-server

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-gssapi-server-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-oqgraph-engine

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-oqgraph-engine-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-pam

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-pam-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-rocksdb-engine

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-rocksdb-engine-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-server

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-server-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-server-utils

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-server-utils-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-sphinx-engine

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-sphinx-engine-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-test

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb114-test-debuginfo

Amazon Linux 2023

3:11.4.13-1.amzn2023.0.1

fixed

mariadb118

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-backup

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-backup-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-client-utils

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-common

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-connect-engine

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-connect-engine-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-cracklib-password-check

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-cracklib-password-check-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-debugsource

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-devel

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-errmsg

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-gssapi-server

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-gssapi-server-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-oqgraph-engine

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-oqgraph-engine-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-pam

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-pam-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-rocksdb-engine

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-rocksdb-engine-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-server

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-server-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-server-utils

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-sphinx-engine

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-sphinx-engine-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-test

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb118-test-debuginfo

Amazon Linux 2023

3:11.8.9-1.amzn2023.0.1

fixed

mariadb123

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-backup

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-backup-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-client-utils

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-common

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-connect-engine

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-connect-engine-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-cracklib-password-check

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-cracklib-password-check-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-debugsource

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-devel

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-errmsg

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-gssapi-server

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-gssapi-server-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-oqgraph-engine

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-oqgraph-engine-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-pam

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-pam-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-rocksdb-engine

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-rocksdb-engine-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-server

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-server-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-server-utils

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-sphinx-engine

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-sphinx-engine-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-test

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

mariadb123-test-debuginfo

Amazon Linux 2023

3:12.3.3-2.amzn2023.0.1

fixed

Common Weakness Enumeration

CWE-284 - Improper Access Control
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References

https://www.oracle.com/security-alerts/cpujul2026.html