CVE-2026-60315 in MySQL Cluster
Summary
by MITRE • 07/22/2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/23/2026
This vulnerability exists within the MySQL Server and MySQL Cluster products, specifically affecting the Server: X Plugin component. The affected versions span across multiple release lines including MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, alongside MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. The vulnerability represents a critical security flaw that can be exploited by unauthenticated attackers who possess network access through multiple protocols, making it particularly dangerous in environments where network exposure is common.
The technical nature of this vulnerability allows for both confidentiality and availability impacts, as demonstrated by the CVSS 3.1 Base Score of 8.2. Attackers can leverage this flaw to cause complete denial of service conditions through hangs or frequently repeatable crashes of the database servers, effectively rendering them unavailable to legitimate users. Additionally, successful exploitation grants unauthorized read access to a subset of data that is normally protected within the MySQL Server and Cluster environments, potentially exposing sensitive information to malicious actors.
From an operational perspective, this vulnerability poses significant risks to organizations relying on MySQL infrastructure for critical data operations. The ease of exploitation means that attackers can compromise systems without requiring authentication credentials, making it particularly attractive for automated attack campaigns. The combination of availability impact with partial confidentiality breach creates a dangerous scenario where attackers can simultaneously disrupt services and extract sensitive data, potentially leading to business disruption and data breaches.
The vulnerability aligns with CWE-125 weakness category related to out-of-bounds read conditions, indicating potential buffer overflows or memory access violations within the X Plugin component. This type of flaw typically arises from insufficient input validation or improper memory management in network protocol handling code. Organizations should consider implementing network segmentation and firewall rules to limit exposure to this vulnerability, while also monitoring for unusual network traffic patterns that might indicate exploitation attempts.
Mitigation strategies should include immediate patching of affected systems to the latest stable releases, which would address the underlying memory handling issues within the X Plugin component. Network-level controls such as restricting access to MySQL ports from trusted networks only and implementing intrusion detection systems can provide additional layers of protection. Organizations should also conduct thorough vulnerability assessments to identify any systems running affected versions and ensure proper access controls are implemented to minimize the attack surface.
The ATT&CK framework categorizes this vulnerability under initial access and execution phases, where adversaries can leverage network-based attacks to establish persistent access to database systems. The availability impact specifically aligns with the denial of service tactics used in advanced persistent threat campaigns, while the confidentiality breach supports data exfiltration objectives. Organizations should implement comprehensive monitoring solutions to detect unauthorized access attempts and ensure proper incident response procedures are in place to handle potential exploitation events.
This vulnerability demonstrates the critical importance of maintaining up-to-date database software and implementing proper network security controls. The combination of remote exploitability with significant impact levels makes this a high-priority concern for database administrators and security teams responsible for protecting enterprise data infrastructure. Regular security assessments and vulnerability management processes should include specific checks for MySQL versions to prevent exploitation of similar flaws in the future.