CVE-2026-60725 Oracle Corporation CVE debrief

Who should care

Administrators and users of MySQL Router, especially those with versions 8.4.0-8.4.10 and 9.7.0-9.7.1, should be aware of this vulnerability and take immediate action to protect their systems. This includes reviewing system configurations, verifying inventory, and ensuring that patches are applied. Additionally, security teams and vulnerability management teams should prioritize this vulnerability due to its high severity and potential impact on critical data. Operators of MySQL Router should also review their exposure and implement compensating controls if necessary.

Technical summary

A vulnerability in MySQL Router allows unauthenticated attackers with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data. This vulnerability affects MySQL Router versions 8.4.0-8.4.10 and 9.7.0-9.7.1. The CVSS score of 7.4 indicates high severity, with significant impacts on confidentiality and integrity. To mitigate this vulnerability, it is essential to review and apply patches from Oracle, restrict network access to MySQL Router, and monitor for suspicious activity.

Defensive priority

High priority due to potential unauthorized access and data modification

Recommended defensive actions

• Review and apply patches from Oracle
• Restrict network access to MySQL Router
• Monitor for suspicious activity
• Verify system configurations and inventory
• Perform a thorough review of system configurations and inventory to identify potential vulnerabilities
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions and retest remediated assets to ensure the vulnerability is fully resolved

Evidence notes

Evidence from official sources indicates a vulnerability in MySQL Router, allowing unauthenticated attackers with network access via HTTP to compromise the system. The CVSS score is 7.4, indicating high severity. Further review of system configurations, inventory, and monitoring for suspicious activity is recommended. Defenders should verify the integrity of their MySQL Router deployments and ensure that patches are applied. Additionally, evidence limits suggest that the full scope of affected systems and potential impact is not yet fully understood, and additional verification is required.

Official resources