CVE catalog
CVE-2026-60187
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Clus
- Severity
- High · CVSS 8.4
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 25, 2026
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. mysql: Replication unspecified vulnerability (CPU Jul 2026) Red Hat Product Security rates the severity of this flaw as determined by the Oracle MySQL Critical Patch Update. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | mysql-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | libmysqlclient-dev | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | libmysqlclient21 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-client-core-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-router | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-server-core-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-source-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-testsuite | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
| Ubuntu | mysql-testsuite-8.0 | noble | 8.0.46-0ubuntu0.24.04.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | mysql-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | libmysqlclient-dev | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | libmysqlclient21 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-client-core-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-router | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-server-core-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-source-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-testsuite | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
| Ubuntu | mysql-testsuite-8.0 | deb | noble | 8.0.46-0ubuntu0.24.04.4 | Not reported | Not reported | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_56007.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-60187]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60187.json]
- [https://ubuntu.com/security/notices/USN-8700-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2441.json]
[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]