CVE-2026-60592

Name of the Vulnerable Software and Affected Versions Oracle MySQL Cluster versions 8.0.0 through 8.0.47 Oracle MySQL Cluster versions 8.4.0 through 8.4.10 Oracle MySQL Cluster versions 9.7.0 through 9.7.1

Description An issue exists in the NDB Operator component of Oracle MySQL Cluster. An unauthenticated attacker with network access via multiple protocols can compromise the system. Successful exploitation may lead to a complete Denial of Service (DOS) by causing the system to hang or crash repeatedly. Additionally, it allows unauthorized update, insert, or delete access to certain accessible data within the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.