CVE-2026-60718 in MySQL Cluster
Summary
by MITRE • 07/22/2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within the JSON processing functionality of MySQL Server and MySQL Cluster versions 9.7.0 through 9.7.1, representing a critical availability risk that can be exploited by low-privileged attackers with network access. The flaw manifests in how the server handles malformed or specially crafted JSON data structures during query execution, creating a condition where malicious input can trigger system instability. The vulnerability's CVSS base score of 6.5 reflects its high impact on system availability, specifically targeting the complete denial of service capability that can either hang the database server or cause repeated crashes that effectively render the service unusable.
The technical exploitation occurs through network-based attacks that leverage multiple protocols including TCP/IP connections to the MySQL service, allowing attackers with minimal privileges to craft specific JSON queries that trigger memory corruption or resource exhaustion conditions within the server's JSON processing engine. This vulnerability operates at the application layer and can be particularly dangerous in production environments where database availability is critical for business operations. The flaw enables attackers to repeatedly crash the database service through carefully constructed JSON inputs, making it a persistent threat that does not require elevated privileges to exploit successfully.
The operational impact of this vulnerability extends beyond simple service disruption, as database crashes can result in data consistency issues, transaction rollbacks, and extended downtime for applications dependent on MySQL services. Organizations using affected versions face significant risk of complete service outages that can affect multiple applications and users simultaneously, particularly in clustered environments where the failure of one node can impact overall system availability. The vulnerability's ease of exploitation means that automated attack tools could be readily developed to target systems, amplifying the potential damage.
Mitigation strategies should prioritize immediate deployment of Oracle's security patches for MySQL Server and MySQL Cluster 9.7.0-9.7.1 versions, as these releases contain fixes specifically addressing the JSON processing vulnerability. Network segmentation and access controls should be implemented to limit exposure of MySQL services to untrusted networks, while monitoring systems should be enhanced to detect unusual patterns in JSON query execution that might indicate exploitation attempts. Additionally, organizations should consider implementing application-level input validation for JSON data and establishing robust backup and recovery procedures to minimize downtime in case of successful exploitation. This vulnerability aligns with CWE-129 and CWE-787 categories related to improper input validation and buffer overflow conditions, while also mapping to ATT&CK technique T1499.004 for network denial of service attacks that specifically target database services.
The affected versions represent a narrow release window where this particular vulnerability exists, making it crucial for organizations to assess their current MySQL deployments and ensure they are running patched versions or have implemented compensating controls. Regular security assessments should include verification of MySQL component versions and monitoring for any signs of exploitation attempts targeting JSON processing capabilities within database systems.