CVE-2026-60183 Oracle Corporation CVE debrief

Who should care

Administrators and users of MySQL Server and MySQL Cluster versions 8.4.0-8.4.10, 9.7.0-9.7.1, and 8.0.0-8.0.47 should be aware of this vulnerability and take necessary actions to mitigate the risk. This includes reviewing and applying patches, restricting access, and monitoring for suspicious activity. Vulnerability management and security teams should prioritize patching and consider compensating controls for exposed systems.

Technical summary

The vulnerability, CVE-2026-60183, has a CVSS 3.1 Base Score of 6.4, indicating a medium severity level. The CVSS Vector is (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), showing that the vulnerability allows for high confidentiality, integrity, and availability impacts. The vulnerability is caused by a weakness in the Server: Clone Plugin component of MySQL Server and MySQL Cluster. Successful attacks can result in the takeover of MySQL Server and MySQL Cluster. Administrators should focus on patching or mitigating this vulnerability, especially in environments where high-privileged access is common.

Defensive priority

High priority should be given to patching or mitigating this vulnerability, especially in environments where high-privileged access is common. Defenders should focus on verifying affected systems, restricting access, and monitoring for suspicious activity.

Recommended defensive actions

• Apply the patches provided by Oracle for MySQL Server and MySQL Cluster.
• Restrict access to the infrastructure where MySQL Server and MySQL Cluster execute.
• Monitor for any suspicious activity related to the Server: Clone Plugin component.
• Consider implementing compensating controls, such as additional authentication or authorization mechanisms.
• Review and update asset inventory to identify exposed systems.
• Plan and track remediation through normal change control.
• Verify and document exceptions and retest remediated assets.

Evidence notes

The CVE record was published on 2026-07-21T22:17:19.290Z and was last modified on 2026-07-27T14:46:12.960Z. The NVD entry is currently Analyzed. Evidence is limited to CVE and NVD information. Defenders should verify MySQL Server and MySQL Cluster versions, review official advisories, and monitor for suspicious activity related to the Server: Clone Plugin component.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.