Skip to content
ThreatCluster

Multiple Vulnerabilities in Oracle MySQL Server and Cluster Disclosed

First seen 13 Oct 2026, 13:29 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 15:32 UTC

Five vulnerabilities have been identified in Oracle MySQL Server and MySQL Cluster, affecting versions 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47. These vulnerabilities allow attackers with varying privileges to exploit the systems, potentially leading to denial of service (DoS) or unauthorized access. The vulnerabilities include CVE-2026-47023, CVE-2026-47064, CVE-2026-60184, CVE-2026-60331, and CVE-2026-47064, with CVSS scores ranging from 4.4 to 6.5. The vulnerabilities were published on July 21, 2026, and are classified as medium severity. Users are advised to apply patches and monitor for any signs of exploitation. Current reports do not confirm in the wild, but the vulnerabilities are easily exploitable under certain conditions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-07-21
Vulnerabilities published
Oracle disclosed multiple vulnerabilities in MySQL Server and Cluster, affecting several versions.
Alas.Aws.Amazon
2026-07-21
CVE-2026-47064 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-60184 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-61081 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-60585 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47023 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-60331 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-60747 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (5)

Following this threat?

Track CVE-2026-47023 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 2

Common questions

Which versions of MySQL are affected?
Affected versions include MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1, and MySQL Cluster 8.0.0-8.0.47.
Are these vulnerabilities actively exploited?
No confirmed active exploitation has been reported for these vulnerabilities as of now.
What should I do to protect my systems?
Apply the latest patches provided by Oracle for the affected MySQL versions to mitigate risks.