Dashboard / CVE-2026-60569

CVE-2026-60569

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 35/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: None
S: Unchanged
C: High
I: None
A: None

Description

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Cluster accessible data. CVSS 3.1 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
oracle mysql_cluster 8.0.0 – 8.0.47
oracle mysql_cluster 9.7.0
oracle mysql_cluster 9.7.1

References & Advisories (1)

Bug Bounty Relevance

35 / 100
✓ No authentication
✓ No user interaction

CVSS Score

5.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.15%
Raw Score 0.001470
Percentile 3.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00147
2026-10-28
0.00147

Intelligence Sources

nvd ref →

External Links