CVE-2026-60174 in MySQL Cluster
Summary
by MITRE • 07/22/2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within the optimizer component of MySQL Server and MySQL Cluster versions 9.7.0 through 9.7.1, representing a significant availability risk that can be exploited by low-privileged attackers with network access. The flaw falls under the Common Weakness Enumeration category of software fault, specifically related to improper handling of query optimization logic that can lead to system instability. The vulnerability's CVSS 3.1 base score of 6.5 indicates a high severity threat primarily impacting system availability rather than confidentiality or integrity.
The technical nature of this vulnerability stems from how the MySQL optimizer processes certain query structures during execution, creating conditions where malformed or specially crafted queries can trigger memory corruption or resource exhaustion within the database engine. Attackers exploiting this weakness can cause repeated system hangs or crashes that effectively render the database service unavailable to legitimate users, constituting a complete denial-of-service condition. The low privilege requirement and network accessibility make this vulnerability particularly dangerous as it can be leveraged by attackers without requiring elevated system access rights.
From an operational perspective, successful exploitation of this vulnerability can result in substantial business disruption due to the complete service unavailability it causes. Organizations relying on MySQL Server or MySQL Cluster for critical database operations face significant risk of extended downtime that can impact application availability and data accessibility. The vulnerability's ability to cause frequent repeatable crashes means that even a single attack can lead to prolonged system instability requiring manual intervention and potential restart procedures.
Security mitigation strategies should prioritize immediate patching of affected versions to 9.7.2 or later releases where the optimizer flaw has been addressed. Network segmentation and access controls should be implemented to limit exposure, while monitoring systems should be configured to detect unusual query patterns that might indicate exploitation attempts. Organizations should also consider implementing database firewalls or query filtering mechanisms to prevent potentially malicious queries from reaching the optimizer component. The vulnerability's classification under ATT&CK technique T1499 suggests defensive measures should include system integrity monitoring and anomaly detection for availability attacks targeting database services. Additionally, regular backup and recovery procedures should be maintained to ensure rapid restoration capabilities in case of successful exploitation events.