MySQL Cluster NDB Operator: Unauth Access 8.0.0-47, 8.4.0-10, 9.7.0-1
CVE-2026-60569 Published on July 21, 2026
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Cluster accessible data. CVSS 3.1 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability Analysis
CVE-2026-60569 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Products Associated with CVE-2026-60569
stack.watch emails you whenever new vulnerabilities are published in Oracle Mysql Cluster or Oracle. Just hit a watch button to start following.
Affected Versions
Oracle Corporation MySQL Cluster:- Version 8.0.0, <= 8.0.47 is affected.
- Version 8.4.0, <= 8.4.10 is affected.
- Version 9.7.0, <= 9.7.1 is affected.