CVE-Katalog

CVE-2026-60585

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Clus

[CVE-Katalog]

Schweregrad: High · CVSS 8.4
Published: Jul 21, 2026, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 22, 2026

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	mariadb	sid	`1:11.8.9+ds-4`	fixed
Debian	mariadb	forky	`1:11.8.9+ds-2`	fixed
Debian	mariadb	trixie	`1:11.8.6-0+deb13u1`	vulnerable
Debian	mariadb	bookworm	`1:10.11.18-0+deb12u1`	fixed
Debian	mariadb	bookworm-security	`1:10.11.19-0+deb12u1`	fixed
Ubuntu	mysql-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	libmysqlclient-dev	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	libmysqlclient21	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client-core-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-router	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server-core-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-source-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-testsuite	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-testsuite-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Alpine	mariadb	3.21	`11.4.13-r0`	fixed
Alpine	mariadb	3.22	`11.4.13-r0`	fixed
Alpine	mariadb	3.23	`11.4.13-r0`	fixed
Alpine	mariadb	3.24	`11.8.9-r0`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	mariadb	source	sid	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	forky	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	bookworm	`10.11.19-0+deb12u1`	not yet assigned	Not reported	Not reported
Ubuntu	mysql-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libmysqlclient-dev	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libmysqlclient21	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client-core-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-router	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server-core-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-source-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-testsuite	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-testsuite-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Alpine	mariadb	apk	3.21	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-60585	Not reported
Alpine	mariadb	apk	3.22	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-60585	Not reported
Alpine	mariadb	apk	3.23	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-60585	Not reported
Alpine	mariadb	apk	3.24	`11.8.9-r0`	Not reported	ALPINE-CVE-2026-60585	Not reported

Notes

[trixie] mariadb: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libmariadb3]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadbd19]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadbd-dev]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadb-dev]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadb-dev-compat]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-backup]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-client]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-client-core]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-common]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · all · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · all · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-connect]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-cracklib-password-check]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-client]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-server]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-hashicorp-key-management]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-mroonga]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-oqgraph]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-bzip2]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lz4]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzma]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzo]Behoben
Quellpaket: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Behoben · Behoben: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm

Weitere Ergebnisse

Beobachtet: Oct 23, 2026, 11:04:52 PM UTC

Referenzen

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]