CVE-2026-61096
LOW
2.9
CVSS 3.1
Metadata
Severity & Metrics
2.9
LOW CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products (2)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Oracle Corporation | MySQL Cluster | — | 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| Oracle Corporation | MySQL Server | — | 8.4.0-8.4.10, 9.7.0-9.7.1 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 2.9 | LOW | 3.1 | cna | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
References (1)
- Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html