CVE-2026-60314

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Vulnerability in MySQL Router (component: Router: General) versions 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable, no authentication required, attacker with network access via HTTP can cause hang or frequent crashes (DOS) of MySQL Router.

Risk Assessment

Risk of disruption of MySQL database routing, potentially leading to unavailability of applications relying on databases.

Recommendation

Update MySQL Router to version 8.4.11 or 9.7.2. Restrict network access to the router's HTTP interface.

Other vulnerabilities in MySQL Router

CVE-2026-60725High
Vulnerability in MySQL Router. Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity.

Original NVD description (English source)

Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Router. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Router. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).