BaselineWatch
Desk

CVE-2026-60192

8.1 high SSVC exploitation: none Analyzed

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 8.1 · oracleNVD modified 2026-10-24 19:10

Affected (CPE criteria) 2

  • cpe:2.3:a:oracle:mysql_connector\/net:9.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_connector\/net:9.7.1:*:*:*:*:*:*:*

References 1