Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-61081

Опубликовано: 21 июл. 2026
Источник: nvd
CVSS3: 2.7
EPSS Низкий

Описание

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_server:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_server:9.7.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.47 (включая)
cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_cluster:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_cluster:9.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00239
Низкий

2.7 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

ubuntu логотип

CVE-2026-61081

CVSS3: 2.7
ubuntu
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

redhat логотип

CVE-2026-61081

CVSS3: 2.7
redhat
10 дней назад

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data.

debian логотип

CVE-2026-61081

CVSS3: 2.7
debian
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...

github логотип

GHSA-jqr3-jfj2-492m

CVSS3: 2.7
github
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

EPSS

Процентиль: 15%
0.00239
Низкий

2.7 Low

CVSS3

Дефекты

CWE-200