CVE-2026-60188 in MySQL Cluster
Summary
by MITRE • 07/22/2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within the replication component of MySQL Server and MySQL Cluster products, representing a significant availability risk that affects multiple version ranges including MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, along with MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. The flaw manifests as a denial of service condition that can be triggered by high privileged attackers who possess network access through various protocols. According to CVSS 3.1 scoring, this vulnerability carries a base score of 4.4 with a vector indicating network accessibility, high attack complexity, high privilege requirements, and universal scope. The vulnerability's classification aligns with CWE-400, which addresses unchecked resource consumption, specifically targeting resource exhaustion through replication mechanisms.
The technical exploitation of this vulnerability occurs through the replication subsystem where an attacker with sufficient privileges can manipulate replication processes to cause system instability. The complete denial of service condition results in either system hangs or repeated crashes that can be executed repeatedly by an attacker, leading to sustained unavailability of critical database services. This type of attack vector typically involves crafted replication events or configuration changes that trigger resource exhaustion within the MySQL server processes. The high privilege requirement suggests that attackers must already have administrative access or equivalent permissions within the database environment, though this access can be achieved through various means including legitimate administrative accounts or compromised credentials.
Operational impact assessment reveals that successful exploitation can severely disrupt database operations and business continuity for organizations relying on MySQL Server or Cluster deployments. The vulnerability's availability impact is particularly concerning as it directly affects service delivery and can lead to extended downtime for critical applications dependent on these database systems. Organizations may experience cascading failures when database services become unavailable, affecting downstream applications that depend on consistent data access and transaction processing capabilities. The repeated crash capability means that even brief attacks can result in significant operational disruption requiring manual intervention and potential system restarts.
Mitigation strategies should focus on network segmentation and access control measures to limit privileged access to replication components. Implementing strict firewall rules and network monitoring can help detect anomalous replication activity patterns that might indicate exploitation attempts. Regular updates and patches from Oracle should be applied promptly to address the vulnerability at the source, while also implementing robust monitoring solutions that can alert administrators to unusual system behavior or resource consumption patterns. Additionally, organizations should consider implementing replication process isolation and resource limits to prevent single malicious operations from consuming all available resources, thereby reducing the impact scope of potential exploitation attempts. The ATT&CK framework categorizes this vulnerability under privilege escalation and denial of service tactics, emphasizing the importance of both access control and system resilience measures in defending against such attacks.