CVE 2026 60184

explore.alas.aws.amazon.com • October 13, 2026

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

FAQs regarding Amazon Linux ALAS/CVE Severity

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Oracle MySQL Server and Cluster Disclosed Five vulnerabilities have been identified in Oracle MySQL Server and MySQL Cluster, affecting versions 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47. These vulnerabilities allow attackers with varying privileges to exploit the systems, potentially leading to denial of service (DoS) or unauthorized access. The vulnerabilities include CVE-2026-47023, CVE-2026-47064, CVE-2026-60184, CVE-2026-60331, and CVE-2026-47064, with CVSS scores ranging from 4.4 to 6.5. The vulnerabilities were published on July 21, 2026, and are classified as medium severity. Users are advised to apply patches and monitor for any signs of exploitation. Current reports do not confirm in the wild, but the vulnerabilities are easily exploitable under certain conditions. 1 sources 59

CVE 2026 60184

The full story

Extracted Entities

Attack Types (1)

Platforms (2)