CVE-2026-60195 Oracle Corporation CVE debrief

Who should care

Administrators and users of MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 should be aware of this vulnerability and take necessary precautions to mitigate the risk. This includes reviewing system configurations, monitoring for suspicious activity, and applying patches or updates as recommended by the vendor.

Technical summary

The vulnerability has a CVSS 3.1 Base Score of 4.9 (Availability impacts) and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). The vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially leading to a hang or frequently repeatable crash (complete DOS) of MySQL Server and MySQL Cluster. This vulnerability affects MySQL Server versions 9.7.0-9.7.1 and MySQL Cluster versions 9.7.0-9.7.1.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, as it can lead to a denial of service (DOS) attack.

Recommended defensive actions

• Apply the patches or updates provided by Oracle to fix the vulnerability.
• Restrict network access to MySQL Server and MySQL Cluster to only necessary personnel.
• Monitor MySQL Server and MySQL Cluster for any suspicious activity.
• Consider implementing additional security measures, such as firewalls or intrusion detection systems.
• Review system configurations to ensure they align with security best practices.
• Perform regular security audits to identify potential vulnerabilities.
• Develop an incident response plan in case of a security breach.

Evidence notes

The CVE record was published on 2026-07-21T22:17:20.727Z and was last modified on 2026-07-27T17:15:13.520Z. The NVD entry is currently Analyzed. This information is based on the provided source corpus and may not reflect the full scope of the vulnerability. Further verification is recommended to ensure accurate understanding of the vulnerability's impact.

Official resources