CVE-2026-60586
High · 7.7CVSS
7.7
EPSS
0.4%
Published
Jul 21, 2026
CISA due date
—
The record
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121736 NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the… CWE-306
- CVE-2022-29966 Emerson Ovation has several protocols that have no authentication, which could allow an… CWE-306
- CVE-2026-63482 Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics… CWE-306
- CVE-2026-121557 WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that… CWE-306
- CVE-2026-121555 Foxel through 2.4.0 contains a missing authentication vulnerability that allows… CWE-306
- CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in… CWE-306
- CVE-2026-119740 Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated… CWE-306
- CVE-2026-119731 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its… CWE-306