Bug 2505172 (CVE-2026-60181) - CVE-2026-60181 mysql: Configurator unspecified vulnerability (CPU Jul 2026)
Summary: CVE-2026-60181 mysql: Configurator unspecified vulnerability (CPU Jul 2026)
Keywords:
Status: NEW
Alias: CVE-2026-60181
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2507338
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-21 22:20 UTC by OSIDB Bzimport
Modified: 2026-07-26 18:20 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-21 22:20:48 UTC 
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).
Note You need to log in before you can comment on or make changes to this bug.