Cloudanix VulnDB

CVE-2026-60747

Medium · 6.2

CVSS

6.2

EPSS

0.2%

Published

Jul 21, 2026

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A flaw in certain versions of MySQL lets someone who can already log into the computer running the database crash or freeze it, causing temporary loss of database access until the software is updated.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Low
Impact
Denial Of Service
Component
Application
Class
Denial of service
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Local unauthenticated attacker with access to the host running MySQL Server or Cluster can trigger a flaw in the replication component that causes the server process to hang or crash, resulting in complete denial of service with no impact to confidentiality or integrity.

Why it matters to the business

Database services become unavailable, leading to application downtime, disrupted operations, and potential revenue loss until the affected MySQL instance is restarted; the issue affects widely deployed MySQL 8.4 and 9.7 releases across enterprise environments.

How an attack unfolds

An attacker who has obtained local logon access to the infrastructure host executes specially crafted operations against the replication subsystem; because the vulnerability is easily triggered without authentication to MySQL itself, the attack immediately produces a repeatable crash or hang of the server process.

How to fix it

Upgrade MySQL Server 8.4 installations to version 8.4.11 or later and MySQL Cluster installations to the corresponding fixed releases; for Red Hat Enterprise Linux 10 systems specifically apply the package mysql8.4-8.4.11-1.el10_2 via RHSA-2026:56007.

How to confirm the fix worked

Verify that the running MySQL binary reports a fixed version string, confirm replication functionality under load, and monitor process stability after applying the update.

Typical attack path

  1. Gain local logon access to a host running vulnerable MySQL Server or Cluster
  2. Interact with the replication component using local tools or scripts
  3. Trigger the flaw to induce a hang or crash of the MySQL process
  4. Repeat as needed to maintain denial of service

How to detect it

Examine system and MySQL error logs for unexpected process terminations or hang indicators around replication events; correlate with authentication logs showing local interactive sessions on database hosts.

What your security team should do

  • Prioritize patching all internet-facing and internal MySQL 8.4.0-8.4.10 and 9.7.0-9.7.1 instances within the next maintenance window
  • Restrict local logon access to database hosts to the minimum required personnel
  • Enable process monitoring and automatic restart mechanisms for MySQL services
  • Review and test replication configurations in staging environments before production rollout

The record

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities