CVE-2026-61096

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1

Description An issue exists in the Pluggable Auth component of the Server. This flaw allows an unauthenticated attacker who has logon access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to unauthorized update, insert, or delete access to certain accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.