Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-60585

Опубликовано: 21 июл. 2026
Источник: nvd
CVSS3: 6.6
EPSS Низкий

Описание

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_server:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_server:9.7.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.47 (включая)
cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_cluster:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_cluster:9.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 29%
0.0036
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

ubuntu логотип

CVE-2026-60585

CVSS3: 6.6
ubuntu
около 2 месяцев назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

redhat логотип

CVE-2026-60585

CVSS3: 6.6
redhat
около 2 месяцев назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

debian логотип

CVE-2026-60585

CVSS3: 6.6
debian
около 2 месяцев назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...

github логотип

GHSA-5wmq-h5x7-m9vv

CVSS3: 6.6
github
около 2 месяцев назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

rocky логотип

RLSA-2026:56973

rocky
25 дней назад

Important: mysql:8.4 security, bug fix, and enhancement update

EPSS

Процентиль: 29%
0.0036
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-284