Cloudanix VulnDB

CVE-2026-61081

Low · 2.7

CVSS

2.7

EPSS

0.3%

Published

Jul 21, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A privileged database administrator could see a small amount of extra internal information they were not supposed to access.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
Low
Impact
Data Exposure
Component
Network Service
Class
Information Disclosure
Remediation
Upgrade
Effort
Medium
Patch risk
Medium

What it actually does

The flaw in the Performance Schema component permits a high-privileged network attacker to read a limited subset of server data that should remain inaccessible.

Why it matters to the business

Privileged insiders or compromised administrative accounts could obtain small amounts of internal database metadata, creating minor confidentiality risk without affecting availability or integrity.

How an attack unfolds

An attacker who already possesses high-privileged network credentials connects to the MySQL instance over any supported protocol and issues queries against Performance Schema tables, causing the server to return a subset of otherwise protected data.

How to fix it

Upgrade MySQL Server to 8.4.11 or 9.7.2 (or later) and MySQL Cluster to the corresponding fixed releases. For Red Hat Enterprise Linux 10 systems running mysql8.4, install package version 8.4.11-1.el10_2 or newer via RHSA-2026:56007.

How to confirm the fix worked

Verify the running server version reports a fixed release, confirm Performance Schema queries no longer expose the previously accessible data subset, and review release notes for the specific component fix.

Typical attack path

  1. Obtain or compromise a high-privileged MySQL account with network access
  2. Connect to the affected MySQL Server or Cluster instance using any supported protocol
  3. Issue targeted queries against Performance Schema tables
  4. Receive unauthorized subset of internal data in the query response

How to detect it

Review MySQL general and audit logs for unusual Performance Schema queries issued by administrative accounts; correlate with authentication events showing high-privileged logins from unexpected sources.

What your security team should do

  • Apply the vendor-supplied updates to all affected MySQL Server and Cluster instances within the next maintenance window
  • Restrict network access to administrative accounts and enforce strong authentication for privileged users
  • Monitor EPSS and threat intelligence feeds for any future increase in exploit maturity

The record

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities