MySQL Server, MySQL Cluster vulnerabilities
21 known CVE vulnerabilities in MySQL Server, MySQL Cluster, translated and rated.
- CVE-2026-61109Medium
Vulnerability in the JSON component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS) of the server.
- CVE-2026-61093Medium
Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
- CVE-2026-60332Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
- CVE-2026-60331Medium
Vulnerability in MySQL Server and MySQL Cluster (Server: Replication component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
- CVE-2026-60324Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) versions 9.7.0-9.7.1. A low-privileged attacker via network can cause a hang or frequent crashes (DOS).
- CVE-2026-60316High
Vulnerability in MySQL Server and MySQL Cluster (X Plugin component) allows a high-privileged attacker via network to take over the system. Exploitation is easy.
- CVE-2026-60195Medium
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
- CVE-2026-60194Medium
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
- CVE-2026-60190Low
A vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high privileged attacker with network access to cause a partial denial of service. Exploitation is difficult.
- CVE-2026-60188Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. A high-privileged attacker with difficult exploitation can cause a hang or frequent crashes (DOS).
- CVE-2026-60187Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service (hang or frequent crash).
- CVE-2026-60186Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-60185Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-60184Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-60182Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-60177Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-60174Medium
Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
- CVE-2026-60145Medium
Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
- CVE-2026-47012Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
- CVE-2026-46936Medium
Vulnerability in MySQL Server and MySQL Cluster (component: Server: DDL) in multiple versions. A high-privileged attacker with difficult exploitation can cause a hang or frequent crashes (DOS).
- CVE-2026-46863High
Vulnerability in MySQL Server and MySQL Cluster that allows an unauthenticated attacker with network access via multiple protocols to compromise the system. An attacker can cause hangs or frequent crashes of the server, leading to complete denial of service.

