CVE catalog
CVE-2026-60183
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Clu
- Severity
- High · CVSS 8.4
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.15% · Oct 25, 2026
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) Red Hat Product Security rates the severity of this flaw as determined by the Oracle MySQL Critical Patch Update. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | mysql-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | libmysqlclient-dev | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | libmysqlclient21 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client-core-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-router | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server-core-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-source-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-testsuite | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-testsuite-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | mysql-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | libmysqlclient-dev | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | libmysqlclient21 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client-core-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-router | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server-core-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-source-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-testsuite | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-testsuite-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_56007.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-60183]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60183.json]
- [https://ubuntu.com/security/notices/USN-8700-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2441.json]
[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]