CVE-2026-60569
published 2026-07-21CVE-2026-60569: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47…
PriorityP425medium5.1CVSS 3.1
AVLACHPRNUINSUCHINAN
EPSS
0.15%
3.5th percentile
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Cluster accessible data. CVSS 3.1 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | mysql_cluster | — | — |
| oracle | mysql_cluster | — | — |
| oracle | mysql_cluster | 8.0.0 – 8.0.47 | — |
| oracle | mysql_cluster | 8.4.0 – 8.4.10 | — |
| oracle_corporation | mysql_cluster | 8.0.0 – 8.0.47 | — |
| oracle_corporation | mysql_cluster | 8.4.0 – 8.4.10 | — |
| oracle_corporation | mysql_cluster | 9.7.0 – 9.7.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle MySQL Cluster up to 8.0.47/8.4.10/9.7.1 Cluster NDB Operator improper authorization (EUVD-2026-46931)
vuldb·2026-08-04·CVSS 5.1
CVE-2026-60569 [MEDIUM] Oracle MySQL Cluster up to 8.0.47/8.4.10/9.7.1 Cluster NDB Operator improper authorization (EUVD-2026-46931)
A vulnerability marked as problematic has been reported in Oracle MySQL Cluster up to 8.0.47/8.4.10/9.7.1. This affects an unknown function of the component Cluster NDB Operator. Performing a manipulation results in improper authorization.
This vulnerability is cataloged as CVE-2026-60569. The attack must be initiated from a local position. There is no exploit available.
GHSA
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).
ghsa_unreviewed·2026-07-22
CVE-2026-60569 [MEDIUM] Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Cluster accessible data. CVSS 3.1 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-21
Published