CVE-2026-60193

HighCVSS 8.5

Published: 21/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Vulnerability in MySQL Connectors (component: Connector/Net) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Attack may affect additional products (scope change) and lead to takeover of MySQL Connectors.

Risk Assessment

Risk includes complete takeover of MySQL Connectors, potentially allowing attacker full access to data and systems, and affecting other products.

Recommendation

Upgrade MySQL Connector/Net to a version later than 9.7.1 and restrict network access to the service.

Other vulnerabilities in MySQL Connector/Net

CVE-2026-60317High
Difficult to exploit vulnerability in MySQL Connector/Net versions 9.7.0-9.7.1. An unauthenticated attacker with network access can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Original NVD description (English source)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).