CVE-2026-60193
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Vulnerability in MySQL Connectors (component: Connector/Net) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Attack may affect additional products (scope change) and lead to takeover of MySQL Connectors.
Risk Assessment
Risk includes complete takeover of MySQL Connectors, potentially allowing attacker full access to data and systems, and affecting other products.
Recommendation
Upgrade MySQL Connector/Net to a version later than 9.7.1 and restrict network access to the service.
Other vulnerabilities in MySQL Connector/Net
See all- CVE-2026-101626Medium
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized access to critical data or all data accessible through the connector, although exploitation is difficult.
- CVE-2026-101625Medium
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible through the connector, requiring user interaction.
- CVE-2026-60317High
Difficult to exploit vulnerability in MySQL Connector/Net versions 9.7.0-9.7.1. An unauthenticated attacker with network access can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS