{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Oracle heeft meerdere kwetsbaarheden verholpen in Oracle MySQL Server en MySQL Cluster.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden betreffen verschillende versies van Oracle MySQL Server en MySQL Cluster. Een aantal kwetsbaarheden stelt een aanvaller met hoge privileges en netwerktoegang in staat om een denial-of-service (DoS) te veroorzaken, waarbij de server kan hangen of crashen, wat de beschikbaarheid van de database beïnvloedt. Sommige DoS-kwetsbaarheden kunnen ook door laaggeprivilegieerde gebruikers worden misbruikt.\n\nDaarnaast zijn er kwetsbaarheden in de Group Replication Plugin en de NDB Operator component die DoS of ongeautoriseerde toegang tot data mogelijk maken.\n\nVerder zijn er kwetsbaarheden die een aanvaller met hoge privileges en netwerktoegang in staat stellen om volledige controle over de server te verkrijgen, wat impact heeft op vertrouwelijkheid, integriteit en beschikbaarheid.\n\nOok zijn er kwetsbaarheden in Oracle MySQL Connectors (Connector/C++, Connector/Net, Connector/J) die ongeauthenticeerde of laaggeprivilegieerde aanvallers met netwerktoegang toestaan om data te manipuleren, toegang te verkrijgen tot gevoelige informatie of een denial-of-service te veroorzaken. Sommige kwetsbaarheden vereisen gebruikersinteractie of lokale toegang.\n\nDe CVSS 3.1 scores variëren van laag (2.2) tot hoog (8.5), afhankelijk van het type kwetsbaarheid en de impact op de systemen. De kwetsbaarheden zijn specifiek voor Oracle MySQL Server, MySQL Cluster en de MySQL Connectors, en zijn exploiteerbaar via netwerktoegang, soms met aanvullende vereisten zoals infrastructuurtoegang, gebruikersinteractie of lokale toegang.", "title": "Interpretaties" }, { "category": "description", "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden in Oracle MySQL Server, MySQL Cluster en MySQL Connectors te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" }, { "category": "external", "summary": "Reference", "url": "https://www.oracle.com/security-alerts/cpujul2026verbose.html" } ], "title": "Kwetsbaarheden verholpen in Oracle MySQL Server en MySQL Cluster", "tracking": { "current_release_date": "2026-07-22T15:25:40.059668Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0262", "initial_release_date": "2026-07-22T15:25:40.059668Z", "revision_history": [ { "date": "2026-07-22T15:25:40.059668Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "Mysql" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "Mysql Cluster" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-3" } } ], "category": "product_name", "name": "Mysql Router" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-4" } } ], "category": "product_name", "name": "Mysql Server" } ], "category": "vendor", "name": "Oracle" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-46936", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, with a CVSS 3.1 base score of 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-46936 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-46936.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-46936" }, { "cve": "CVE-2026-47008", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0 to 9.7.1 allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-47008 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47008.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-47008" }, { "cve": "CVE-2026-47012", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-47012 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47012.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-47012" }, { "cve": "CVE-2026-47023", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-47023 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47023.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-47023" }, { "cve": "CVE-2026-47052", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster (InnoDB) allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, with a CVSS 3.1 base score of 4.9.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-47052 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47052.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-47052" }, { "cve": "CVE-2026-47064", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster allows a low-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated with a CVSS 3.1 base score of 6.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-47064 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47064.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-47064" }, { "cve": "CVE-2026-60145", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 8.4.0-8.4.10 and 9.7.0-9.7.1 allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 score 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60145 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60145.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60145" }, { "cve": "CVE-2026-60163", "notes": [ { "category": "description", "text": "A critical vulnerability in Oracle MySQL Server and MySQL Cluster's Group Replication Plugin allows unauthenticated attackers with infrastructure access to fully compromise the server, rated with a CVSS 3.1 base score of 8.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60163 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60163.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60163" }, { "cve": "CVE-2026-60171", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Cluster versions 8.0.0 to 8.0.47 allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated with a CVSS 3.1 score of 4.9 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60171 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60171.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60171" }, { "cve": "CVE-2026-60174", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated CVSS 3.1 base score 6.5 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60174 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60174.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60174" }, { "cve": "CVE-2026-60177", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60177 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60177.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60177" }, { "cve": "CVE-2026-60178", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a highly privileged attacker with network access to potentially take control of the server, with a CVSS 3.1 base score of 6.6.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60178 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60178.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60178" }, { "cve": "CVE-2026-60179", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/C++ versions 9.7.0 to 9.7.1 allows unauthenticated network attackers to create, delete, or modify critical data, with a CVSS 3.1 base score of 7.4 indicating high confidentiality and integrity impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60179 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60179.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60179" }, { "cve": "CVE-2026-60180", "notes": [ { "category": "description", "text": "A denial of service vulnerability in Oracle MySQL Connector/C++ versions 9.7.0 to 9.7.1 allows unauthenticated network attackers to crash or hang the service, with a CVSS 3.1 score of 7.5 due to availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60180 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60180.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60180" }, { "cve": "CVE-2026-60181", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with infrastructure access and user interaction to potentially compromise the server, with a CVSS 3.1 base score of 6.7.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60181 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60181.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60181" }, { "cve": "CVE-2026-60182", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60182 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60182.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60182" }, { "cve": "CVE-2026-60183", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with infrastructure access to potentially compromise the server, with a CVSS 3.1 base score of 6.4 indicating significant impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60183 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60183.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60183" }, { "cve": "CVE-2026-60184", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60184 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60184.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60184" }, { "cve": "CVE-2026-60185", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60185 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60185.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60185" }, { "cve": "CVE-2026-60186", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster's Group Replication Plugin allows a high-privileged attacker with network access to cause denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60186 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60186.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60186" }, { "cve": "CVE-2026-60187", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60187 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60187.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60187" }, { "cve": "CVE-2026-60188", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60188 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60188.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60188" }, { "cve": "CVE-2026-60189", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 4.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60189 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60189.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60189" }, { "cve": "CVE-2026-60190", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to cause a partial denial of service, rated with a CVSS 3.1 base score of 2.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60190 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60190.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.2, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60190" }, { "cve": "CVE-2026-60191", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker to cause a denial-of-service by hanging or crashing the server, with a CVSS 3.1 base score of 4.1 due to availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60191 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60191.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60191" }, { "cve": "CVE-2026-60192", "notes": [ { "category": "description", "text": "A high-severity vulnerability in Oracle MySQL Connector/Net versions 9.7.0 to 9.7.1 allows unauthenticated network attackers to compromise confidentiality, integrity, and availability of the MySQL Connectors.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60192 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60192.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60192" }, { "cve": "CVE-2026-60193", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/Net versions 9.7.0 to 9.7.1 allows a low-privileged attacker with network access to compromise confidentiality, integrity, and availability, rated with a CVSS 3.1 base score of 8.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60193 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60193.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60193" }, { "cve": "CVE-2026-60194", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a high-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated with a CVSS 3.1 base score of 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60194 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60194.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60194" }, { "cve": "CVE-2026-60195", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a high-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated with a CVSS 3.1 base score of 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60195 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60195.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60195" }, { "cve": "CVE-2026-60311", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.0.0 to 9.7.1 allows a low-privileged attacker with network access to cause a denial-of-service by crashing or hanging the server, rated CVSS 3.1 base score 6.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60311 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60311.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60311" }, { "cve": "CVE-2026-60314", "notes": [ { "category": "description", "text": "A denial of service vulnerability in Oracle MySQL Router versions 8.4.0-8.4.10 and 9.7.0-9.7.1 allows unauthenticated network attackers via HTTP to crash or hang the service, with a CVSS 3.1 base score of 7.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60314 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60314.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60314" }, { "cve": "CVE-2026-60315", "notes": [ { "category": "description", "text": "A critical vulnerability in Oracle MySQL Server and MySQL Cluster versions 8.4.0-8.4.10, 9.7.0-9.7.1, and others allows unauthenticated network attackers to cause denial of service and unauthorized data read, with a CVSS 3.1 base score of 8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60315 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60315.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 8.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60315" }, { "cve": "CVE-2026-60316", "notes": [ { "category": "description", "text": "A critical vulnerability in Oracle MySQL Server and MySQL Cluster allows a highly privileged attacker with network access to fully compromise the server, with a CVSS 3.1 base score of 7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60316 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60316.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60316" }, { "cve": "CVE-2026-60317", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/Net versions 9.7.0 to 9.7.1 allows unauthenticated network attackers to create, delete, or modify critical data, with a CVSS 3.1 base score of 7.4 indicating high confidentiality and integrity impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60317 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60317.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60317" }, { "cve": "CVE-2026-60324", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated CVSS 3.1 base score 6.5 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60324 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60324.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60324" }, { "cve": "CVE-2026-60331", "notes": [ { "category": "description", "text": "A local high-privileged attacker can exploit a vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster to potentially take control of the server, with a CVSS 3.1 base score of 6.4 indicating significant impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60331 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60331.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60331" }, { "cve": "CVE-2026-60332", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 8.4.0-8.4.10 and 9.7.0-9.7.1 allows a high-privileged attacker with infrastructure access to potentially take control of the server, with a CVSS 3.1 base score of 6.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60332 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60332.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60332" }, { "cve": "CVE-2026-60569", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Cluster (NDB Operator) versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1 allows an unauthenticated attacker with infrastructure logon to gain unauthorized access to critical MySQL Cluster data, with a CVSS 3.1 base score of 5.1.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60569 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60569.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60569" }, { "cve": "CVE-2026-60585", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to potentially take control of the server, with a CVSS 3.1 base score of 6.6 indicating significant impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60585 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60585.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60585" }, { "cve": "CVE-2026-60586", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/J versions 9.7.0 to 9.7.1 allows a low-privileged attacker with network access to gain unauthorized access to critical data, with a CVSS 3.1 base score of 7.7.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60586 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60586.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "baseScore": 7.7, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60586" }, { "cve": "CVE-2026-60623", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/J versions 9.7.0 to 9.7.1 allows a low-privileged attacker with network access to gain unauthorized access, modify critical data, and cause partial denial of service, rated CVSS 7.1.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60623 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60623.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "baseScore": 7.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60623" }, { "cve": "CVE-2026-60624", "notes": [ { "category": "description", "text": "A denial of service vulnerability in Oracle MySQL Connectors (Connector/J versions 9.7.0-9.7.1) allows unauthenticated attackers with network access and user interaction to cause the connectors to hang or crash, rated CVSS 6.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60624 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60624.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60624" }, { "cve": "CVE-2026-60718", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated CVSS 3.1 base score 6.5 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60718 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60718.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60718" }, { "cve": "CVE-2026-60725", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Router versions 8.4.0-8.4.10 and 9.7.0-9.7.1 allows unauthenticated network attackers via HTTP to create, delete, or modify critical data, resulting in unauthorized access with a CVSS 3.1 base score of 7.4.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60725 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60725.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60725" }, { "cve": "CVE-2026-60747", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows an unauthenticated attacker with infrastructure access to cause a denial-of-service by hanging or crashing the server, rated CVSS 3.1 base score 6.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-60747 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60747.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-60747" }, { "cve": "CVE-2026-61081", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a high-privileged attacker with network access to gain unauthorized read access to certain data, with a CVSS 3.1 base score of 2.7 indicating low confidentiality impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61081 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61081.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "baseScore": 2.7, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61081" }, { "cve": "CVE-2026-61082", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Connector/J versions 9.7.0 to 9.7.1 allows unauthenticated attackers with network access and user interaction to gain unauthorized access to critical data, rated with a CVSS 3.1 base score of 6.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61082 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61082.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61082" }, { "cve": "CVE-2026-61093", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated CVSS 3.1 base score 6.5 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61093 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61093.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61093" }, { "cve": "CVE-2026-61094", "notes": [ { "category": "description", "text": "A high-severity vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a highly privileged attacker with network access to fully compromise the server, with a CVSS 3.1 base score of 7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61094 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61094.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61094" }, { "cve": "CVE-2026-61096", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster allows an unauthenticated local attacker to perform unauthorized data modifications, with a CVSS 3.1 base score of 2.9 indicating low integrity impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61096 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61096.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 2.9, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61096" }, { "cve": "CVE-2026-61108", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a low-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated CVSS 3.1 base score 6.5 for availability impact.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61108 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61108.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61108" }, { "cve": "CVE-2026-61109", "notes": [ { "category": "description", "text": "A vulnerability in specific versions of Oracle MySQL Server and MySQL Cluster allows a low-privileged network attacker to cause denial-of-service by crashing or hanging the server, with a CVSS 3.1 score of 6.5.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61109 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61109.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61109" }, { "cve": "CVE-2026-61128", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a high-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated with a CVSS 3.1 base score of 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61128 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61128.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61128" }, { "cve": "CVE-2026-61144", "notes": [ { "category": "description", "text": "A vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0-9.7.1 allows a high-privileged attacker with network access to cause a denial of service by crashing or hanging the server, rated with a CVSS 3.1 base score of 4.9.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] }, "references": [ { "category": "self", "summary": "CVE-2026-61144 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-61144.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4" ] } ], "title": "CVE-2026-61144" } ] }