CVE catalog

CVE-2026-61081

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MyS

[CVE catalog]

Severity: High · CVSS 8.4
Published: Jul 21, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.26% · Oct 25, 2026

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	mariadb	sid	`1:11.8.9+ds-4`	fixed
Debian	mariadb	forky	`1:11.8.9+ds-2`	fixed
Debian	mariadb	trixie	`1:11.8.6-0+deb13u1`	vulnerable
Debian	mariadb	bookworm	`1:10.11.18-0+deb12u1`	fixed
Debian	mariadb	bookworm-security	`1:10.11.19-0+deb12u1`	fixed
Ubuntu	mysql-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	libmysqlclient-dev	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	libmysqlclient21	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-client-core-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-router	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-server-core-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-source-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-testsuite	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Ubuntu	mysql-testsuite-8.0	noble	`8.0.46-0ubuntu0.24.04.4`	fixed
Alpine	mariadb	3.21	`11.4.13-r0`	fixed
Alpine	mariadb	3.22	`11.4.13-r0`	fixed
Alpine	mariadb	3.23	`11.4.13-r0`	fixed
Alpine	mariadb	3.24	`11.8.9-r0`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	mariadb	source	sid	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	forky	`1:11.8.9+ds-1`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	mariadb	source	bookworm	`10.11.19-0+deb12u1`	not yet assigned	Not reported	Not reported
Ubuntu	mysql-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libmysqlclient-dev	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libmysqlclient21	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-client-core-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-router	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-server-core-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-source-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-testsuite	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	mysql-testsuite-8.0	deb	noble	`8.0.46-0ubuntu0.24.04.4`	Not reported	Not reported	Not reported
Alpine	mariadb	apk	3.21	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-61081	Not reported
Alpine	mariadb	apk	3.22	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-61081	Not reported
Alpine	mariadb	apk	3.23	`11.4.13-r0`	Not reported	ALPINE-CVE-2026-61081	Not reported
Alpine	mariadb	apk	3.24	`11.8.9-r0`	Not reported	ALPINE-CVE-2026-61081	Not reported

Notes

[trixie] mariadb: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libmariadb3]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadbd19]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadbd-dev]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadb-dev]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[libmariadb-dev-compat]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-backup]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-client]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-client-core]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-common]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · all · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · all · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-connect]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-cracklib-password-check]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-client]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-gssapi-server]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-hashicorp-key-management]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-mroonga]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-oqgraph]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-bzip2]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lz4]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzma]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
[mariadb-plugin-provider-lzo]Fixed
Source package: [mariadb]
Details (2)
- 1:10.11.18-0+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm
- 1:10.11.18-0+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 10.11.19-0+deb12u1
  nvd · mariadb · debian · bookworm

Next results

Observed: Oct 23, 2026, 11:04:52 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]