CVE-2026-61109 Oracle Corporation CVE debrief

Who should care

Administrators and users of MySQL Server and MySQL Cluster products, especially those with low-privileged access and network access via multiple protocols, should be aware of this vulnerability. They should review the official advisory and take necessary actions to protect their systems.

Technical summary

The vulnerability has a CVSS 3.1 Base Score of 6.5 (Availability impacts) and a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The vulnerability is classified under CWE-400. It allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Server and MySQL Cluster, potentially causing a hang or frequently repeatable crash (complete DOS). Affected versions include MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Administrators should verify their deployments and consider applying patches or mitigations.

Defensive priority

Medium

Recommended defensive actions

• Apply the patches provided by Oracle in the July 2026 CPU.
• Restrict network access to MySQL Server and MySQL Cluster to only necessary personnel.
• Monitor MySQL Server and MySQL Cluster for unusual activity.
• Consider implementing compensating controls, such as Web Application Firewalls (WAFs) or Intrusion Detection Systems (IDS).
• Review and update asset inventory to identify potentially affected systems.
• Plan and schedule remediation through normal change control.
• Track exceptions and retest remediated assets.

Evidence notes

The CVE record was published on 2026-07-21T22:18:42.150Z and was last modified on 2026-07-27T17:41:28.193Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and CVE record. Defenders should verify the affected versions of MySQL Server and MySQL Cluster and review the official advisory for specific details.

Official resources