Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-60163

Опубликовано: 21 июл. 2026
Источник: nvd
CVSS3: 8.4
EPSS Низкий

Описание

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_server:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_server:9.7.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.47 (включая)
cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_cluster:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_cluster:9.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 7%
0.00176
Низкий

8.4 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

ubuntu логотип

CVE-2026-60163

CVSS3: 8.4
ubuntu
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

redhat логотип

CVE-2026-60163

CVSS3: 8.4
redhat
10 дней назад

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster.

debian логотип

CVE-2026-60163

CVSS3: 8.4
debian
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...

github логотип

GHSA-r8hj-8qqf-f8wc

CVSS3: 8.4
github
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

EPSS

Процентиль: 7%
0.00176
Низкий

8.4 High

CVSS3

Дефекты

CWE-284