Scope
The broader MySQL Community Edition product set includes MySQL Server, MySQL Cluster, MySQL Shell, MySQL Router, MySQL NDB Cluster, MySQL Workbench, and MySQL Connectors. Based on the affected rows shown in the July 2026 Oracle MySQL Risk Matrix, the MySQL Community Edition products represented on this page are:
MySQL Server
MySQL Cluster
MySQL Connectors
MySQL Router
How to use this page
- Use the Product column to confirm that the row applies to a Community-distributed component.
- Use Supported Versions Affected as the vulnerable version range, not the fixed version.
- Use the CVE, component, protocol, exploitability, and CVSS columns to determine exposure and severity.
- Use the corresponding MySQL Community release documentation to identify the release that contains the fix.
Summary
MySQL Community Edition rows54
Affected product families4
Remote exploitable without auth9
Highest CVSS base score8.5
Counts above reflect only the MySQL Community Edition rows represented on this page from the July 2026 Oracle MySQL Risk Matrix.
Affected MySQL Community Edition products and vulnerable version ranges
- MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1, 9.7.0-9.7.1
- MySQL Cluster: 8.0.0-8.0.47, 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1, 9.7.0-9.7.1
- MySQL Connectors: 9.7.0-9.7.1
- MySQL Router: 8.4.0-8.4.10, 9.7.0-9.7.1
MySQL Community Edition vulnerability details
| CVE ID | Product | Component | Protocol | Remote Exploit without Auth.? | Base Score | Attack Vector | Attack Complexity | Privileges Required | User Interaction | Scope | Confidentiality | Integrity | Availability | Supported Versions Affected |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-60193 | MySQL Connectors | Connector/Net | MySQL Protocol | No | 8.5 | Network | High | Low | None | Changed | High | High | High | 9.7.0-9.7.1 |
| CVE-2026-60163 | MySQL Server, MySQL Cluster | Server: Group Replication Plugin | None | No | 8.4 | Local | Low | None | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60315 | MySQL Server, MySQL Cluster | Server: X Plugin | X Protocol | Yes | 8.2 | Network | Low | None | None | Unchanged | Low | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60192 | MySQL Connectors | Connector/Net | MySQL Protocol | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 9.7.0-9.7.1 |
| CVE-2026-60586 | MySQL Connectors | Connector/J | MySQL Protocol | No | 7.7 | Network | Low | Low | None | Changed | High | None | None | 9.7.0-9.7.1 |
| CVE-2026-60180 | MySQL Connectors | Connector/C++ | X Protocol | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9.7.0-9.7.1 |
| CVE-2026-60314 | MySQL Router | Router: General | HTTP | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60179 | MySQL Connectors | Connector/C++ | X Protocol | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 9.7.0-9.7.1 |
| CVE-2026-60317 | MySQL Connectors | Connector/Net | MySQL Protocol | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 9.7.0-9.7.1 |
| CVE-2026-60725 | MySQL Router | Router: General | HTTP | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60316 | MySQL Server, MySQL Cluster | Server: X Plugin | X Protocol | No | 7.2 | Network | Low | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-61094 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 7.2 | Network | Low | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60623 | MySQL Connectors | Connector/J | MySQL Protocol | No | 7.1 | Network | High | Low | None | Unchanged | High | High | Low | 9.7.0-9.7.1 |
| CVE-2026-60181 | MySQL Server, MySQL Cluster | Server: Configurator | None | No | 6.7 | Local | High | Low | Required | Unchanged | High | High | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-60178 | MySQL Server, MySQL Cluster | Server: Clone Plugin | MySQL Protocol | No | 6.6 | Network | High | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60585 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 6.6 | Network | High | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-47064 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60174 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-60311 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.0.0-9.7.1; MySQL Cluster: 9.0.0-9.7.1 |
| CVE-2026-60324 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-60624 | MySQL Connectors | Connector/J | X Protocol | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9.7.0-9.7.1 |
| CVE-2026-60718 | MySQL Server, MySQL Cluster | Server: JSON | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-61082 | MySQL Connectors | Connector/J | MySQL Protocol | Yes | 6.5 | Network | Low | None | Required | Unchanged | High | None | None | 9.7.0-9.7.1 |
| CVE-2026-61093 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-61108 | MySQL Server, MySQL Cluster | Server: GIS | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-61109 | MySQL Server, MySQL Cluster | Server: JSON | MySQL Protocol | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60183 | MySQL Server, MySQL Cluster | Server: Clone Plugin | None | No | 6.4 | Local | High | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60331 | MySQL Server, MySQL Cluster | Server: Replication | None | No | 6.4 | Local | High | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60332 | MySQL Server, MySQL Cluster | Server: Group Replication GCS | None | No | 6.4 | Local | High | High | None | Unchanged | High | High | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60747 | MySQL Server, MySQL Cluster | Server: Replication | None | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60569 | MySQL Cluster | Cluster: NDB Operator | None | No | 5.1 | Local | High | None | None | Unchanged | High | None | None | 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-47008 | MySQL Server, MySQL Cluster | InnoDB | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-47023 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-47052 | MySQL Server, MySQL Cluster | InnoDB | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60145 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60171 | MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8.0.0-8.0.47 |
| CVE-2026-60194 | MySQL Server, MySQL Cluster | Server: JSON Duality | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-60195 | MySQL Server, MySQL Cluster | Server: JSON Duality | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-61128 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-61144 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1 |
| CVE-2026-46936 | MySQL Server, MySQL Cluster | Server: DDL | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-47012 | MySQL Server, MySQL Cluster | Server: Optimizer | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60177 | MySQL Server, MySQL Cluster | Server: Clone Plugin | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60182 | MySQL Server, MySQL Cluster | Server: Clone Plugin | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60184 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60185 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60186 | MySQL Server, MySQL Cluster | Server: Group Replication Plugin | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60187 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60188 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60189 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60191 | MySQL Server, MySQL Cluster | Server: Replication | None | No | 4.1 | Local | High | High | None | Unchanged | None | None | High | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-61096 | MySQL Server, MySQL Cluster | Server: Pluggable Auth | None | No | 2.9 | Local | High | None | None | Unchanged | None | Low | None | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-61081 | MySQL Server, MySQL Cluster | Server: Performance Schema | MySQL Protocol | No | 2.7 | Network | Low | High | None | Unchanged | Low | None | None | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |
| CVE-2026-60190 | MySQL Server, MySQL Cluster | Server: Replication | MySQL Protocol | No | 2.2 | Network | High | High | None | Unchanged | None | None | Low | MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1 |