What is the CVSS score of CVE-2026-60189?

CVE-2026-60189 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-60189?

Yes, a patch is available for CVE-2026-60189. Update the affected software to the latest version immediately.

MySQL Server CVE-2026-60189

EUVD-2026-46595 MEDIUM

Improper Access Control (CWE-284)

2026-07-21 oracle

GHSA-mprr-478p-9vpc

Authentication Bypass Oracle Red Hat Mysql Cluster Mysql Server Suse Oracle Corporation

4.4

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

4.4 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

4.4 MEDIUM

Network-reachable replication component but requires high privileges and complex attack conditions; impact is strictly availability with no confidentiality or integrity exposure.

3.1 AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

MEDIUM

qualitative

Red Hat

4.4 MEDIUM

qualitative

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 02:16 vuln.today

CVE Published

Jul 21, 2026 - 21:33 nvd

MEDIUM 4.4

DescriptionCVE.org

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

AnalysisAI

Denial of service in Oracle MySQL Server and MySQL Cluster's Replication component allows a high-privileged network attacker to cause a complete, repeatable crash or hang of the database service. Affected are MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. No public exploit identified at time of analysis; the CVSS 3.1 score of 4.4 (Medium) accurately reflects the high privilege requirement and elevated attack complexity that substantially constrain real-world risk.

Technical ContextAI

The vulnerability resides in the Replication component of Oracle MySQL Server and MySQL Cluster - the subsystem responsible for synchronizing data between primary and replica database nodes using multiple protocols (binary log, group replication, etc.). CPE identifiers cpe:2.3:a:oracle_corporation:mysql_server and cpe:2.3:a:oracle_corporation:mysql_cluster cover the affected product lines across the listed version ranges. No CWE has been assigned, so the precise root cause class is unconfirmed; the availability-only impact and the repeatable crash or hang behavior are consistent with an assertion failure, unhandled exception, or resource exhaustion condition in replication protocol processing, but this is inferred rather than confirmed from available data.

RemediationAI

Apply the patches released in Oracle's Critical Patch Update for July 2026, available at https://www.oracle.com/security-alerts/cpujul2026.html. The provided data does not specify exact fixed version numbers; consult the CPU directly to identify the minimum patched release for your MySQL Server or MySQL Cluster version stream before upgrading. As a compensating control prior to patching, restrict network access to MySQL replication ports (default TCP 3306, or dedicated replication ports if configured) to only explicitly authorized replica hosts and management nodes using host-based firewall rules or security group policies; this reduces the network attack surface without disrupting legitimate replication, though it requires careful enumeration of authorized replication peers. Additionally, audit and minimize the set of accounts holding high-privilege or replication-specific grants, reducing the pool of credentials whose compromise could enable exploitation. Note that firewall restrictions on replication traffic may require reconfiguration of replica node connection strings.